Committee software has a failure mode that has nothing to do with features. The treasurer sets it up, four people sign in once, and within a month the group is back to email attachments and one person's memory. The tool did not lack anything. Nobody could get into it.
Volunteers are not employees
A workplace tool can assume daily use — you sign in every morning, so the password stays in your head and your browser. A committee tool gets opened once a month, by people doing this in the evening after work, for no money. Every one of those logins is a fresh chance to have forgotten the password, and a password reset at 9pm is exactly the moment someone decides it is easier to just send an email.
Which is how you end up with the shared committee login written on the inside of a folder, passed to whoever needs it, never changed when people leave. That is the realistic alternative, and it is worse than no security at all — it looks like access control while being none.
The most common committee password is the one everybody knows.
Delete the login screen
Bilby Bunch has no passwords. You put in your email, you get a link, you are in. There is nothing to forget, nothing to reset, nothing to share, and nothing to leave behind when you step down. Access is a property of your inbox, which you already keep track of.
The interesting part was not the security improvement, though there is one. It was that removing the login screen removed the reason committees drifted back to email. The tool stopped being a place you had to get into, and became a link someone sent you.