Facebook / Google / etc Love this shit. They can do it in-house and at scale.
Everyone else is going to use third parties:
1. Who will store that data...
2. They WILL get breached (they Always do).
3. They WILL track which sites you auth against.
4. They WILL sell that information.
This isn't speculation, it's simply inevitable.