I'm all for Oauth integration in principal, albeit the "standard" has its (reasonable and well-criticized) issues, but I think there's more of a case to be made here for what's important to highlight to avoid user error on the part of the web browsers / clients themselves.

Maybe incognito mode should be the default state of any new browser install and non-incognito is a preference or toggle? This would avoid mass consumer public consumption auth issues.