And they have an account.
No auth code, no user table, no password resets, no support ticket that begins “I lost my”. Your app gets an address and gets on with it.
// your app
const yuin = createClient({ app })
await yuin.login()
// that's their account
yuin.account

Not even us.