I really hate this bullshit "security". Why on earth do I have to log in every single day? If anything, it gives an attacker more chances to either steal my password, or makes me more likely to be phished because logging in is so automatic now.
It has negative security. Log me in for a fucking month, stop wasting a minute of my time every day!
Because everything is sitting out on the public internet now, only protected by those things.
Because the alternative is that a very long or unlimited session cookie can be stolen and used for months to impersonate you. That’s the tradeoff
It's also crazy that as far as technology has advanced, the concept of the username/password is still so prevalent. Passkeys are sort of changing things, it all still feels decidedly low-tech. Edit: Can you get a Yubikey as an RFID implant? ...asking for a friend.