On: Users don’t need a password

The only problem of passwords is that the they are unsafe and mostly broken.

Having said that, it is the easiest tool to "identify" a regular Joe in a regular web.

All non-regular-more-secure webs should use 2FA.