I think websites would have a tough time preventing users from sharing username/password. It would certainly be acceptable in a power of attorney situation.
Not only do they relay the login and 2fa information, they even show the login as a window with company colors and branding as if you were logging in to your bank directly.
