> Would much rather have a truly decentralized identity where you can change providers without losing continuity of your identity. Where your identity provider has to keep you happy, or you transparently move your identity to a new provider.

This sounds like my dreams. Is there anything that exist now that does this?

For Azure, could you use a 1:1 mapping of Managed Identities and use Federated Credentials? (OIDC).