yeah, the whole point was to make fun of web2 development as it went. Now he has web3 logins too, which are way more awkward than anything before, but, like, work with as few 3rd parties as possible.

The regular login is just password that fetches creds stored in local storage without any cookies. Most of time one wouldn't even notice it, and as secure as CORS/HTTPS (which would screw you if not working properly anyway). Kind of shows what a pile of data-stealing nonsense this all is.