I don't like complaining about something like this without offering a solution, so I've opened a new issue with my own attempt at explaining how id-token works based on my current mental model of the feature

→ View original post on X — @simonw