Isn't allowing SSO users to access the API using basic authentication with a password, less secure?

[SanthoshPinto]

2H 2024- PLA-46617

You can now reset passwords for SSO users to use with HTTP Basic Authentication in Manage Login Accounts. However, the system only supports supplied passwords. You can't reset an SSO user's password with a system-generated one. Also, the system doesn't generate a password reset email.

Reset Passwords of SSO Users for HTTP Basic Authentication