I don't know why the author blames Spring in this.

You can't swing a dead cat in HN without someone saying "just use Spring, it handles session cookies for you automatically"

Likewise why blame JWTs for needing to reauthenticate. Not needing to reauthenticate is JWTs unique selling point.

And I don't think we developers ever knew how to write distributed systems. It sounds like the Weblogic guys did though.