Liability can also mean dealing with all the issues in supporting and maintaining the edge cases, not just legal woes. It is probably much easier, from a maint

Liability can also mean dealing with all the issues in supporting and maintaining the edge cases, not just legal woes. It is probably much easier, from a maintenance standpoint, to simply allow other libraries take the mantle and just structure your project to play nice with middleware. Much easier to just say “use package x for auth support.”