Getting rid of passwords is a good idea, but we need to think through the consequences of the most likely replacement, too.