We need password managers to cope with passwords, then why not replace passwords with full cryptographic keys? Then we can have public-key crypto to log in to services, meaning a server breach will not affect us (as) negatively.