@tedivm I get the impression, given that it's often NHS sites, that some comedian sold someone who didn't know the idea that it was more secure.
My app that gets me more medicine uses Apple face recognition and sometimes asks for a word I set up, too.
*sigh*