Not the creator of this, but as an indie dev working on a sideproject that requires login, I also only expose third party auth as a means to avoid bots and mali

Not the creator of this, but as an indie dev working on a sideproject that requires login, I also only expose third party auth as a means to avoid bots and malicious actors. I do have email authn enabled behind a flag though, and if anyone tells me that they want access without a social account I can share that special url with them. FWIW, I also avoid social logins, but I'm less vocal about it.