I mean, if the official base64 website said "base64 is an open, industry standard method for storing passwords securely in databases", I'd agree with you, but i

I mean, if the official base64 website said "base64 is an open, industry standard method for storing passwords securely in databases", I'd agree with you, but it's only JWT.io that makes that claim. If you're making a security library that's easy to use incorrectly, it's not easy to use correctly, and it's probably more of an insecurity library.