I just saw this when spinning up airflow [image: image.png]
I think the message is confusing / misleading / not very helpful. There's nothing necessarily wrong with having simple auth or no auth if you control access some other way. Moreover we don't tell users what they should do instead! So I think we should either remove this bubble or add more nuance and point them in a direction that will lead them to what we *do* recommend.
