Hm, so the point of adding this additional hop (which is also a JSON under the .well-known/ prefix), is that I can always put the domain of my homepage into WebFinger aware OIDC login boxes, no need to remember the domain of my OIDC provider?
It is, to date, the only non-selfhosted service with which I can use my self-hosted SSO setup.
Gotta get that sweet sweet SSO Tax revenue, and justify it by blaming setup and integration expense for SAML?