The issue I take with this stance is that people reading will put auth in the "too scary to implement" bucket mentally, and think it's fine to pay the Auth0 tax

The issue I take with this stance is that people reading will put auth in the "too scary to implement" bucket mentally, and think it's fine to pay the Auth0 tax on every single project, even one with a few users. This is a great resource to learn how to write it yourself, and things to take into consideration: https://lucia-auth.com/ https://lucia-auth.com/ IMO, this is one thing to implement carefully if need be (vs avoid altogether, as is the case of cryptography).