@cyrus they already don't..? that one script someone posted didn't account for the ?handle= parameter which then enables non-bsky.social oauth