My read of this is 'don't write your own auth library'. If you want to rely on someone else to host it, or host it yourself, that's up to you and entirely fine

My read of this is 'don't write your own auth library'. If you want to rely on someone else to host it, or host it yourself, that's up to you and entirely fine. Different pros and cons of each approach; neither is perfect.