New security tip, drag every login pop-up windows outside of your browser.. if the window can move out of the browser.. it's (more likely) legit (or at least you know the address bar is real to check), if it doesn't then you're being phished.
Then as long as both the username/password and certificate authentication were required, then password reuse wouldn't matter.
That being said, there are still plenty of cars that are unique looking now, Miata, Supra, GR86, BRZ, CT5-V, CT4-V, Stinger, Taycan, and plenty more!
Dead Comment