Passwordless logins are supposed to simplify authentication, but passkeys, OTPs, and Verified Email made things feel even messier.