This makes me conclude that these types of solutions are really more about portability and making some sort of political point (the only thing users realistically control is first party authorization – nothing else); They certainly don't have any security or privacy-related guarantees.