OAuth 2 does a job, it works - it's not broken. It's widely implemented by the major players in the web space (Google, Facebook, Microsoft, Yahoo). It's being u

OAuth 2 does a job, it works - it's not broken. It's widely implemented by the major players in the web space (Google, Facebook, Microsoft, Yahoo). It's being used by those companies (and many, many others) without their systems being compromised because of it. It's business as usual. As engineers of the world wide web (and it's future), it's our responsibility to avoid the toys being thrown out of other's prams (strollers) from time to time.