Email accounts seem to be easy to create afresh and easy to hack into, mobiles are not that easy but still doable.
What does this mean for identity and authentication going forward? Most big IDPs still require email (sure you can sign-in with phone or email)
But why is email still an identifier and will this continue?
Thoughts?