Solid-OIDC relies on solid:oidcIssuer delegation in WebID Document, SAI, similarly, relies on interop:hasAuthorizationAgent. Compromising any of them can lead to gaining owner-level access to all storage owned by the agent WebID denotes.

Prior discussion

• Security considerations for integrity of solid:oidcIssuer triples solid-oidc#219