One of the problems with giving users access means that they can forward such access to malicious actors. It's a tough choice and perhaps not the right one for

One of the problems with giving users access means that they can forward such access to malicious actors. It's a tough choice and perhaps not the right one for some, but I think preventing people from shooting themselves in the foot is the right call for many. Many do not understand the consequences of their actions and will readily grant access incorrectly. While I agree that a single company shouldn't be unilaterally in charge of controlling access on behalf of users, I would say the industry doesn't do a good job of coming together to produce an option that works. Look at the software supply chain as an example of what tends to happen. The Linux distros do a pretty good job, but they maintain far fewer packages and getting your application into a distros repos isn't trivial.