That's my main gripe with OAuth and SSO logins. It's such an obvious tradeoff between convenience and centralizing power.

I don't really want GitHub knowing everything I sign into, but in some cases like Tailscale my only option is to tell GitHub about it or not use Tailscale.