My argument is that if you need authentication, the browser should have that built in as a first class citizen. And if you don’t want it, then why set cookies?

Nope.