I keep reading in these posts about OAuth and I haven't the foggiest idea what that is.
OAuth is a modern authentication method of how cloud systems verify who you are and you are the "real you." Because of the constant hacking and that our passwords may be leaked, there is a chance hacker may already have your password. This lead to 2FA or MFA (2 factor or multi-factor authentication). Things like send a SMS message of a pin, email you a pin, or have you enter a one-time code from a security app, are those additional factors of authenticating you.
OAuth provides a mechanism to allow the initial login to handle 2FA/MFA. Some of the older apps were build before OAuth was fully finalized or implemented, so their support OAuth is either partial or missing altogether. OAuth allows a more secured method of storing information that your device or your app is authenticated or trusted, so your app or client doesn't get constantly challenged by the server everytime it tries to fetch or sync data, which happens dozens if not hundreds times a day.
The issue is not OAuth itself but Microsoft's implementation of it on their servers. To be fair, Microsoft is one of the biggest hacking targets in the world, so what it deals with on a daily basis is likely severe and more than what we can appreciate or fully grasp. Microsoft issue is that it made all these changes, unverified, on real-world production servers and yet doesn't offer a comparable method for us to workaround these issues.