one thing the web should have evolved by now is a portable non-centralised way to verifiably assert "I am the owner of <email address>" because this is clearly necessary for loads of things and approximately nobody does a good job of implementing it

this might have been what mozilla persona and original openid were basically. unfortunately those got kicked aside in favour of, at best, outsourcing your password table