The inherent problem with passwords is that ifthey are leaked, they can be used by anyone. AS could do a better job here by supporting 2FA or passkeys. Lots of companies do 2FA through their apps now which is a lot more convenient (and secure) than a 6-digit code via SMS. I wouldn't mind a "confirm this is you [yes/no]" notification in the Alaska app every time I book an award.