In implementation, passwords are a complete disaster. We’ve been dealing with the fallout of it for decades.

In theory, if everyone did everything correctly and followed best practices, passwords would work quite well.

Reality shows we are not anywhere near there.