Does grav-plugin-login offer an easy way to support this common paradigm?
Currently not.
But this feat was introduced in the Admin plugin a few days ago (https://github.com/getgrav/grav-plugin-admin/pull/685), it can be added to frontend Login as well.