This is where the problem lies. Everyone and their mom thinks it's trivial to do authentication and authorization (as an example), so they keep rewriting things

This is where the problem lies. Everyone and their mom thinks it's trivial to do authentication and authorization (as an example), so they keep rewriting things and in many cases full of security bugs, instead of using something created by people with expertise.