Katlaszlo

Everyone here is reaching for infra (VMs, throwaway users) because the permission model only has two settings: Ask-every-time or --dangerously-skip. That seems to me like a design gap, and scoped capabilities and budget caps are missing. Same way you'd onboard a junior eng.

It gets the job done- but forget a password, and come on. I appreciate the nostalgia but... UX

Who am I? It's an artistic choice?

I faced the same issue working around stripe. Decoupling is the best move imo.