But just one company at a time. There's something to be said for heterogeneity.
I just have folks use different auth in different contexts, not about rolling my own. Basically means using more passwords. Sorry, you need to login to each place separately. I offer a locally hosted password manager.
How do you handle rolling passwords when there’s a breach?
The blast radius is bigger when a centralized service is breached into.