I agree on the “guarantee” if read pedantically. But I can at least use proven frameworks for authentication and even integrate passkeys. I might do it wrong, o

I agree on the “guarantee” if read pedantically. But I can at least use proven frameworks for authentication and even integrate passkeys. I might do it wrong, of course, but there’s an incredibly, extremely high chance that it will be safer than the API in TFA which was known to only use email address string regurgitation as its sole authentication.