Well this explains why every time I get payment autofill suggestions from Google it's a random one of four or five possible auth flows, and pulls from an arbitrary one of at least two separate data sources with different sets of cards saved...
I let my password manager handle it now.