> thereby creating a form of centralization.

Fair point on app-level auth, still far less centralized than the status quo, where the data, the permissions, and every function on top all belong to one company.