Risk-averse client is not allowing creation of Entra ID App for PnP PowerShell authentication due to "security risks". What to do?

[tandrasi]

As the title states, we have a client that just will not allow creation/use the Entra ID App that we need to connect via PnP. This is our only means of painless and stable deployment of our SPFx app within a SharePoint Online site which is driven by lists and libraries.

We have really old PowerShell scripts we used in the past to deploy things like content types, site columns, and lists. However, they were always a pain to use and had loads of bugs, leading to manual updates.

I feel like I have told the client everything about PnP and what the Entra ID App is actually doing. We are getting nowhere.

What else can I say? If this doesn't go through, what other options exist for deploying a SharePoint Online site with multiple pages, lists, libraries, content types, site columns, etc...?

Thanks