Long story short:
I came from enterprise Java (Mid size trucking co.), (wrote logistics software) to PHP. Why, semi retired now and started maintaining a site for a humane society who already had php.
With that said, most large enterprise has custom code, including authorization, roles, etc.
All I was trying to tell the OP is that laravel doesn't force anyone to use the built in auth.
And in my opinion, many php frameworks keep adding more and more stuff because many so called developers don't have a clue how to handle it on their own any more. They expect more and more to be built in.
TAKE NOTE I said in my opinion, I did not say fact.
I like my auth, but I am not saying laravels is bad or good, use it or don't use it. Taylor doesn't force any thing on anybody, which is why I like laravel.
because people come to the framework with their new project in mind. They install the framework and the first thing in their head about writing an application is that "I need users to login"
Exactly right, when in real life they should have programming security training already.
New programmers should not start with laravel until 6 months at least of the basic training, a year would be even better.
I would not hire an electrician who called themselves an electrician with only one day on the job, I want one who has completed the FOUR YEAR apprenticeship and has become a journeyman electrician.
Ditto for programmers.