> I don't know about the specifics of Minecraft launcher, but usually these types of unified login schemes are all based on OAuth. The Minecraft launcher never/

> I don't know about the specifics of Minecraft launcher, but usually these types of unified login schemes are all based on OAuth. The Minecraft launcher never/shouldn't get your actual login, and instead they get a scope-restricted oauth access/refresh token. Benefits really depend on your threat model. Login process uses same credentials which can access everything. But afterwards, the credentials stored in Minecraft has limited access, if third party has a way to steal them.