Even if that's correct, I should not need to use a second device to log in because of some asinine decision not to have a password field.

Solving problems that don't exist, and creating problems that don't need to.