Also, companies have mass popularized the whole 'click a link in an email to login' thing, which really contributes to the mistake factor.