It should be mentioned that it also allows for distributed authentication providers (home servers). A very important feature and big tech strategy is not hiding this. But you can keep Google, Apple, Microsoft and similar completely out of the loop.

The name of the protocol is very badly chosen though.