Instead of asking users to create another password, they just specify a username, tap, and they have an account. Good security and UX do not need to be at odds.