With multiple data sources requiring authorization, which don't support it on their own, it indeed makes sense to handle at least some of the authorization in t

With multiple data sources requiring authorization, which don't support it on their own, it indeed makes sense to handle at least some of the authorization in the software accessing them all, and then it's indeed more complex. I just doubt it's commonly needed, to the point of listing it under things making authorization in general hard.