I think big 3rd party services like google can be used reliably? Just that in the beginning, adding own authentication with password management, email verification, password reset would be too slow to implement and maybe less secure than 3rd party? And in the moment of crisis like a hack, it does feel like handling nuclear waste!!