The security value of the authentication-first mode lies in converging the attack surface from multiple applications to a single authentication entry point.