Social logins, email logins, password resets, multi-tenant, organizations, many to many users to organizations, etc etc. Not necessary for MVP, but can definitely be painful hacking in later if the MVP hits.
Whether it's painful to put in later or not is sadly nothing that the managers and executives concern themselves with.