A timely demonstration of the design pressure to improve account management UX at the PDS level
Both bsky.app + mu.social currently need the same permissions, but by supporting OAuth earlier, the fork highlights the security implications of blurring whether the app or the PDS manages your account
