All this points to the simple fact that the login mechanism hasn’t really changed for nearly a decade now