https://www.scmagazine.com/perspective/protecting-against-cross-platform-account-takeover More proof that we need Wave.