Gitlab has a great set of CI tools for deploying docker images, and includes an internal registry of images automatically tied to your repo and available in CI.

Static API tokens ARE the alternative. He’s saying oauth is not worth the complexity, and increase the barrier to entry to using his API.

Static API keys are not a new or customer solution, they are the baseline. He’s saying stay at the baseline, oauth is not worth it.