I agree that writing your own login routines is not hard, except I wouldn’t want anyone to have the impression that it’s trivial. It’s not trivial. It requires

I agree that writing your own login routines is not hard, except I wouldn’t want anyone to have the impression that it’s trivial. It’s not trivial. It requires some knowledge to do it well. Off the top of my head—choice of unique identifier, password complexity rules, hashing best practices, registration flows, recovery flows, abuse detection, markup hinting for password managers... I could go on.