Yes, and I find it absolutely ridiculous. But I have found a couple companies that do a sort of "middle-ground" – SSO via SAML2 locked behind some "call us" en

Yes, and I find it absolutely ridiculous. But I have found a couple companies that do a sort of "middle-ground" – SSO via SAML2 locked behind some "call us" enterprise BS, but Google Auth available to all. MailGun does this, and so does Linear. Atlassian charges extra for SSO (via Atlassian Access) but it's just $30 a month or something, so seems totally reasonable even if extra. This feels like a decent middle ground for smaller companies since it requires zero extra config.