NextAuth feels like the perfect compromise until...

✅ You still own all security patches

✅ You still handle scaling issues

✅ You still write compliance docs

✅ You still get 2am incident calls

It's not really "managed" auth - it's just auth with training wheels.

Sometimes the compromise is worse than either extreme.