I would have found the article more damning had the author cited examples beyond standards-based protocols like OAuth