Yes, you are right, there are still a lot of use cases to consider. This article is more about the general flow of authentication, and I think those issues are irrelevant to this article, and including them makes it complex to understand the main purpose of the article.