[domador]

Yet in many cases it is. I've come across various systems where there is no "what you know" password only a "what you look like" password.

[kjs3]

Yup. I guess if you don't do much of this "it's not a password" sounds like "there's no risk".