Pretty reductive. The author even lists pros and cons for every alternative, as if every option is a shade of gray except email+password. I'm not going to forc

Pretty reductive. The author even lists pros and cons for every alternative, as if every option is a shade of gray except email+password. I'm not going to force users of my service to create a Google account, I'm not going to let Google decide whether a user's account should be banned on _my service_; and I'm not going to oblige users to sign using webauthn.