AIs can barely handle PKCE OAuth flow. It’s not very hard to confuse them.