Every time you sign into an app, you get redirected to the auth provider to open a session there. So of course they know your login times.

I don't think you followed the thread. I began discussing the OAuth privacy nightmare, then the counter point was that the with email auth providers know anyway, but they don't know the login times necessarily, unlike with OAuth.