[wonderlg]

Great, but “don’t roll your own auth” should still be the default. I’ve seen far too many awful login systems at any level that I’d really prefer if NO ONE rolled their own, especially no single unsupervised developer.

[doublerabbit]

> I’d really prefer if NO ONE rolled their own

I really disagree with this. How do you learn about encryption, security et cetera if you don't do it yourself?

It would be like removing the letter B from ABC because the letter B may be unsafe.