Oauth has a usecase for situations where you need to login to an app but can’t access email. For example a Roku app. What you do is have the user log in with a different device, like a phone or a separate PC. A PIN sent via a text message is a good example of a side channel.

I would just say that this is an application-specific issue, and it’s an edge case.