From a strict security perspective this is true. But as my family's IT manager, both passcodes and single sign on are nightmares that I now actively avoid. They perpetuate lock in by large companies, removing any flexibility in who/when/how you can log in.
Need to share a log in with your spouse? Impossible.
Teenage kid traveling without the family and wants to watch a show? Impossible.
Mom in the hospital and you need to pay her utility bill for her? Impossible.
The best password is no password at all.
Supported by major companies like Google, Apple and Microsoft, passkeys use your face or fingerprint to keep your account secure, no password to steal
Also, use Single Sign On provided by someone you know whenever you can.
https://www.linkedin.com/feed/update/urn:li:activity:7473054079867510784