One human, real money: sign-in is a magic link plus an authenticator code on every session. No passwords exist.