This is outdated news though. It's cope. People are out there telling themselves "well it's insecure". That was true. The AI models are better hackers then humans now though. Red teaming your own code with AI will produce a better penetration test then any developer trying to implement OIDC.

And frankly...have you tried configuring Keycloak? It is a gigantic "do everything app". The idea that it's going to have a narrower attack surface is basically fantasy.