Comment by oaiey

Because they know what they do.

Operating keycloak or whatever software correct and securely is something you need experts and someone dedicated. It is not a side job to run a auth service.