I’ve found Zitadel to be the best open source Oauth2 provider. It also supports terraform for a fully IaC approach to declaring your users and their permissions.

Later Android versions do support this… It’s just called Multiple users (or a work profile but I think you need Google Workspace to set that up).

You can set up a new user as a sandbox for these types of apps and shut them down when not in use.