Why logging into Crypto.com is not just a click: separating products, verifying identity, and protecting assets