i saw many that use the email as “convenience”, as the user can later login with a magic link (i hate those!) without the oauth or even using another oauth service linked to the same email