GP did agree that there are some cases where this doesn't apply: > Not all businesses are the same, and I'm sure there are some where you need to run auth in-h

GP did agree that there are some cases where this doesn't apply: > Not all businesses are the same, and I'm sure there are some where you need to run auth in-house (like if you're selling on-prem software), but I'm mindful that most companies simply cannot run auth securely.