For example, Ion Auth looks like a great library and it is well-documented; but it has some overlapping functions with DMZ - like many other auth libraries. So, doing it the "DMZ way" sounds a lot logical to me.
In the meantime, will it be reliable to write an extension for auth and user management? Or will it be better to write a library from scratch - but which requires DMZ to work?
