All of those auth abstractions do a lot more than what I want. And because of that, they are far more complicated. And they can involve so much abstraction that

All of those auth abstractions do a lot more than what I want. And because of that, they are far more complicated. And they can involve so much abstraction that you don't even know exactly how your own system works. And the lack of understanding can lead to worse practices. Probably because auth abstractions are so complicated is why developers started thinking auth is hard when all it was doing was putting a uuidv4 in a session_id cookie. Like writing SQL without an ORM, developers have been psyop'ed into thinking things are so hard that they shouldn't even try.