I do run Authentik and even for applications I don’t expose to the internet, for the sole reason of multiple accounts. I have friends who use my server so it’s not just a single user environment. Thus, complete control of authentication is a must for me. Might be worth considering if this might apply to you too!