Okay. So they took a solution that was in a barely-working state due to their deliberate neglect, and still managed to give a bad new UX when they got the opportunity to rework it?

> "they can't be provisioned by the website itself."

It's funny, we used to have a html tag that would exactly that: <keygen />