Well, you end up with something like kerberos. Horrifying complexity rarely evolves in a vaccuum. Every tried building an ecommerce platform? It's really funny

Well, you end up with something like kerberos. Horrifying complexity rarely evolves in a vaccuum. Every tried building an ecommerce platform? It's really funny. You start out as a fresh whippersnapper who is all like "MAN, stuff like spree is maddeningly complicated. We don't need something that complicated, we can just start real easy!" and fast forward three months and you've got a few white hairs, a deep hatred of paypal and something not dissimilar from what you wanted to avoid in the first place. The better alternative would be to lobby all plugin vendors to switch to bcrypt/insert preferred alternative here.