This isn't necessarily bad,

I'm of the opinion that it is bad, from the perspective of the user. They are now locked into that company. It not bad from the perspective of the authentication provider, and the service provider may get a positive outcome of it from fewer breaches due to bad passwords.

The problem is the authentication provider isn't trust worthy.