The outsourced login is the default, but it's optional. You could easily set up email/magic link based login on both Oasis and the self-hosted version.