Most CLI auth flows spin up a localhost server and pray your browser cooperates. That model breaks the moment you’re SSH’d into a server. RFC 8628 fixed this in 2019 and a lot of tools still haven’t caught up.