>e.g. locking the user out and prompting them to install an app
this has never happened to me in 5+ years of using reddit
this has never happened to me in 5+ years of using reddit
I even have freaking 2FA but they still don't remember the device and ask me every time for the code.
Which does make things less of an evil intent and more of a "if our laziness pushes our users to where we make money, that's an unfortunate side effect".