OAuth 2M TLS

The value of OAuth 2M TLS is really protecting against the use of leaked or stolen tokens. From a cost standpoint, I think the main cost comes in sort of getting it up and running and maintenance of the mutual HTTPS infrastructure itself. It's just proven to be not trivial over time. And maybe someone will come along and solve that, but I'm not aware of many people that have.