@o2night wrote:
Maybe, but how many people can keep up with a different password for every single app, website or program they have?
Everyone can and should. With the excellent secrets ("password") managers available for every platform and well integrated with modern web browsers, it's far easier and safer to manage and use good authentication - userid, unique long random passphrase, code and/or passkey - than it has ever been.
And if you think those password keepers are safe....well.....enough said.
If by "password keepers" you mean tools such as 1Password, Bitwarden, Proton Pass and the like, then we really can make a fair comparison of the actual risks of using these tools compared to the various alternatives going back decades and it's not even close. The folks who have had to deal with their Roku account access being changed are the ones who are suffering the consequences of not having taken advantage of this technology.
No "security" advice applies indefinitely and no one step provides perfect protection against all threats, but right now and for many years to come, the single best step any of us can take to keep our accounts as well-protected as we are able is to use a secrets manager on all the systems which we use to access the accounts. As we've seen in this incident, it is the service providers such as Roku who let us down by not providing the standards-based opportunity to properly protect our accounts and what is stored in them.
