I'm guessing they simply didnt want to spend the time and money doing that

Possibly didn’t want to accept the additional risk that comes with rolling your own auth as well.