Now I'd like a similar opera centered around Mohammed to compare the reactions.

It shows a message which wastes valuable screen estate, especially on low resolution terminals, containing a message I have to read every single time because the keys are not in muscle memory, and never will because the bindings are stupid.

On systems I have control over the reaction to nano popping up is exiting, removing it, making sure the package system blocks reinstallation attempts, and go back to what I was initially doing in a sane editor.

Yeah, I assumed you meant the master password to the password manager.

Still, that falls under the duty of the page I'm visiting to keep their stuff secure - and while I'm very unhappy about some recent practices¹ I'd more for documenting and battling it out in court, if necessary.

¹ My browser configuration used to prevent 3rd party iframes or similar constructs for entering passwords - unfortunately in recent years some idiots decided that's good design, so more and more often you nowadays have to allow embedding third party components without it being visible where it comes from.

Even worse, quite often credit card verification or other payment forms get embedded the same way. Until a few years ago my bank was throwing errors in their forms when they got embedded this way, but unfortunately they caved in to the general idiocy out there, and allow that nowadays.

You're describing a shitty password manager.

In my case I have a local copy of the encrypted password database, and my master password unlocks the encryption key for that, which is stored in a hardware dongle. Browsers and other high risk software are running isolated and have no access to the encrypted password database or the hardware dongle.

I mainly see two factor authentication as a way for service providers to be lazy about account protection on their side, which they try to outsource to me.