To me the whole value prop of Sandstorm is the idea that we can run our own absolutely independent cloud server. External dependencies for auth or hosting (e.g. relaying everything through sandcats.io) bring us to "well why not just use Google?"
While there are definitely platforms that work with just a username and password, they are arguably drastically less safe in that scenario.