The main reason is that strong protection of a private key typically requires dedicated hardware (typical examples of this are hardware security modules (HSMs) and smart cards), and historically, use of such hardware hasn???t been very convenient??? if you lose the hardware or don???t have it with you, you can???t sign in.