@florida_ted @ArtSmart Well, without website implementation of it, it won't help. It's a suggestion for the future. Right now, it's only for SSH connections.
Sites need to implement something akin to it. For example, I generate a JSON web token to invite people to a chat room I operate for a HOA. Clicking on the link enters the chat. It could be a benefit of a free sign-up, getting an open-ended JSON token.
This is a real mess, and won't get solved quickly (unless all companies agree on a standard, asap). Even 2-factor can be hacked, so something has to give.