Core Authorization Disabled

What a great module. This feature really should be on board of Drupal... especially due to the fact, that the trend is since years headless. Maybe not in the Drupal community ;) ... which is getting slowly quite frustrating to be earnest.

So thank you again for your work.

I have a question regarding the turned off core rest service authentication handlers.

I have seen in source, that they are manually disabled. Why is that?

We use a NextJs / Node Frontend, that uses Drupal as CMS/ member management layer.
Every single request is done via node by using OAuth2. Such a important feature like creating users (even if they are blocked) should not be open in our case. We have a whole user registration workflow in the frontend that activates / creates the user via api / node endpoint.

Is there any way to secure the endpoints?
Thanks in advance