For a small/solo team, which is the audience under consideration, they probably want to spend their time on their core product and not reimplementing oauth.