Yeah but self hosted means someone out of laziness will expose a port so they dont have to be home to sync or configure wireguard, etc… and/or since all ips are scanned anyway…

Complacency will result in more leaks and less knowledge of them maybe?

I reckon “passwords on a notepad in pen and ink” is safer plus passkeys like yubi.

If someone breaks into your home you got other concerns..

I actually think if a bunch of companies started hosting their own SSO, we'd hear of a lot more hacks. I'm not sure orgs would put in enough resources to do things properly other than "hey we got keycloak working"

random IT departments won't do a better job securing IDP than google or microsoft or whatever, self-hosting that stuff will just lead to more, mostly smaller breaches.

simultaneously, Okta seems rather bad at their job of not getting hacked and having proper fucking audit logs

Companies don't force their cloud hosting solutions because it's good for users, they do it because they can make more money. Unfortunately I think things will have to get a lot worse before companies have to reverse course on this.