+1 for Authentik! It definitely has a steep learning curve, but once you get comfortable with it, it’s really versatile. The integration docs have tons of walkthroughs for setting up Authentik with different apps which is epecially helpful when getting started.
That’s just the default, and I assume it’s mainly to make it easier for new users to start using Lemmy. It lets you change to any other instance during login.