The need of OAuth arose because we wanted to give access of some of our resources at the Resource Server (for example my Name/Email at Facebook) to the 3rd party apps. This justifies various grant-types.
But for the "password" grant-type, the specification says this type is suitable in cases where the resource owner has a trust relationship with the client.
My question is what is the need of adding more complication if we can manage the trusted app with username/password?
The only relevant thing I can find at the spec is:
It is also used to migrate existing clients using direct authentication schemes such as HTTP Basic or Digest authentication to OAuth by converting the stored credentials to an access token.
If this is the only reason, how would I get affected if I use direct authentication with "trusted-apps"?