[f430]

isn't the whole purpose of using Auth0 so that this stuff never happens?

[whydoineedthis]

no, it's that it happens less and when it does it's not so much your engineers problems as you have already paid someone to fix it.

also, security practices are supposedly better and more robust there than at your average place.

i think those two things are the value adds.

[f430]

im not sure i see why i should use auth0 over AWS Cognito