REST routes broken again

Problem/Motivation

In 6.0.2, https://www.drupal.org/project/simple_oauth/issues/3547975 🐛 REST routes crashing, claiming unsupported format Active fixed routes not supporting the format html.

I am afraid that with 6.0.3 we have almost come full-circle on this.
Now routes that do not allow the default format "html", like typical REST routes, are broken again:

With https://www.drupal.org/project/simple_oauth/issues/3518947 🐛 404 error not output correctly. Active , the "applies()" method
returns FALSE in those cases which leads to a 403. Since no oauth2 authentication takes place,
I guess.

What's more: $url_object should be initialized to NULL before the "try".
I get "Warning: Undefined variable $url_object in Drupal\simple_oauth\Authentication\Provider\SimpleOauthAuthenticationProvider->applies()" (line 136 of /var/www/html/web/modules/contrib/simple_oauth/src/Authentication/Provider/SimpleOauthAuthenticationProvider.php)

Line 136 is the one with
if (!$url_object) {