Captchas are the main point of wanting a new extension. Also email and text confirmations. Some sites insist on those even when there is nothing valuable behind the login.