In the end we are talking about "smart-card-alike" auth, something there since decades, cheap, functional, safe and apparently ignored by most.

Curiously biometric crap is not ignored as well instead, and is pushed by any means...