OAuth2 is a way of storing a session token.
It is, however, standardized and the the threat model is well documented. Even though OAuth2 was indeed designed for 3rd-party access to APIs, it is still relevant in 1st-part scenarios.
Regarding mobile applications and authentication UI, there are 2 ways of doing it:
using a native UI that sends the ...