zlacker

A "massive security win" would be using physical non-copyable keys instead of software palliative.

>>codedo+(OP)
Both things can be significant. It's worth noting that:

a) SSO has no financial cost. Hardware keys do.

b) SSO has been implemented and standard for years and is trivial for sites to support, hardware keys are much newer and are still rarely supported for authentication.

c) You can use hardware keys with SSO, which I'd recommend, and now you've gotten the benefits of both.