The bad guys will try to take over accounts all the time. Logging onto someone’s account with their credentials is usually a whole lot easier than trying to compromise the website directly.
Refer Here for Original Post and Source https://blog.knowbe4.com/are-account-takeovers-driving-towards-a-passwordless-future