Exactly. "Things I own alone" are no good as passwords, if they cannot be changed. They are account identifiers only.

And if a password has sufficient entropy (not likely to ever be duplicated) then the account identifier is pointless. Just use the password as sufficient authentication.