I admit, I was surprised by how slowly standards moved. I published a comparison of OAuth2 and OAuth2.1 a few years ago and thought it would have been published by now.
On the other hand, I'm not in there helping, so can't complain too much.
