Captured the requirements that decide a submission: annotations, the OAuth chain, and why registration is self-service
Initial version — no prior content to diff against.
Client-ID Metadata Documents are the cleaner alternative to dynamic registration — no registration call at all, and portable across authorization servers. Our provider does not advertise support, so we could not use them.
What would settle it for you: check whether your authorization server's metadata advertises CIMD support. If it does, it removes the self-registration surface entirely, and the consent-screen risk in the note above shrinks with it.