On the one hand, using OIDC means that you don't need to have a password for every site any more, and can have a single trusted third party handling authentication, and who can handle all the best practices and MFAA rather than leaving it to the individual sites where it's not their core competencies.

On the other hand, fuck all these third parties, who will be rubbing their hands with glee being able to track all the sites that you've logged in to. Need to get a bit more 'open' into 'OpenID'.