So zero options that will not tie their service to some other service still.
So much for resilience.
You can self host with Headscale.
You can also use passkeys so you aren't tied to a centralized SSO provider.
You can self host with Headscale.