The alternative would be to not use a third party IdP, but the issue of stolen end user credentials is still present.