last time I tried thunderbird for mail, it didn't support oauth and was still in the less secure apps flow

my sense is that oauth requires centralization and is fairly complex for an OSS org to support? like the thunderbird team would still need to host one redirect and a private key to enable this