1 and 3 come pre-installed with the web template, which is the equivalent of a scaffolded Django or RoR app. 2 is just an npm install. You're trying to draw a distinction when there really isnt one.
Doesn’t sound as batteries included as Django can be OOTB. You should be able to touch a database, setup templates and users without installing anything outside of Django. Which you absolutely can. Not sure the framework in question is this seamless.
ORM, Auth, Session and templates are first party packages and maintained by the core team.