Without oauth the user would type in their more limited per-site credentials, not their google creds or whatever.

Splitting hairs if people reuse passwords, but I feel like "don't reuse passwords" is easier to digest for the layman than "check the ssl cert".