Cool take, but password security IS outdated since long before AI, I think the new really scary part is target selection - crawl Linkdin and FB and send personalized attacks - what works for advertising also works for phishing (after all they are basically the same thing ;)