Misconception: Logging in is just a button — why Kraken access is a security and workflow decision