Sigh.

So, "decentralized" identities, where the user is encouraged not to concern themselves about the plumbing and where they just insert a one-liner into their website and then a company handles that boring public key ledger stuff.

This is all fine, except for one teensy-weensy problemette. It ain't decentralized.

You're still beholden to some company for the whole thing to work. And it's worse than that because now some company knows when you log in, and from where and suddenly you've come down with a nasty dose of surveillance capital again.