> people can choose to use a framework that handles auth competently, such Django or Rails, no need to roll their own The problem is there's a trend to prefer

> people can choose to use a framework that handles auth competently, such Django or Rails, no need to roll their own The problem is there's a trend to prefer hyped-up languages with little/no battle-tested frameworks like those so this is literally not an option for a lot of companies where their "backend" is a pile of hand-rolled shit on top of Express.js, FastAPI or other minimalistic framework. It might be a technically possible option to switch over to one of those, but too many people would have to lose face (at multiple levels, from individual developers all the way to investors) so it will never happen.