Not sure what the audience’s intended education level is supposed to be, but it seems pretty narrow. The minute it brings up API keys, it loses everyone who isn’t a software developer or self-hoster. The remaining people probably already have a decent enough understanding of Oauth that the rest of the guide is probably too simplistic.