You&#x27;re seriously suggesting that every random site on the Internet should take email addresses and passwords, with all the increased attack surface that implies, instead of delegating to authentication providers who know what the hell they&#x27;re doing and are not going to serve up everyone&#x27;s credentials and private data to the first halfway serious attacker to happen along. And you&#x27;re asking me if <i>I&#x27;m</i> joking?