> In the health insurance industry, for example, many insurance portals offer one account that has to be used by a team.

Sorry, but are you kidding me? Do these companies pass security audits?

This only shows that security is near the bottom of the priority list for these companies, probably right above privacy.