> I often wonder how many authentication log files contain passwords because people in a hurry append it to the username on accident

Is this why everyone does 2-step login on websites now?