A security researcher told me to close my OAuth registration endpoint. I said no.
A developer running the QR code service QRFLOW.codes rejected a security researcher's recommendations to require credentials or manual review on its OAuth dynamic client registration endpoint, arguing…