This is really puzzling. 

The OAuthcalypse came and went, and the apps that it should have killed, the ones that use basic authentication, are still running.  

Two examples: dwcodeupdates and friendsofdave. 

The only explanation I've been able to come up with is that they made exceptions for these two accounts for some reason. 

I felt I had to document this.  

So, it is documented. Any theories welcome. (That aren't paranoid or paranormal.)