There's also something about "admin" and "HR" systems in companies where they ignore everything they told you not to do.

I don't think I've worked anywhere yet that does 2FA, SSO, or even a vaguely usable system that doesn't look like it was made 30 years ago in these departments.

Which is extra troubling as these systems are the ones with the PII!