Most sites moved in that direction because dealing with customer support requests for folks who forgot their password gets old real quick.

This is what duck.com email addresses are for, imho.

that needs an extension in the browser. why?

To minimize abuse. It’s a nominal barrier to entry.