Actually oAuth isn't really the main problem. For one you can still login and get the list of your articles, but more importantly even with oAuth you couldn't get the full articles by using the public API as this is only allowed for selected partners
https://getpocket.com/developer/docs/v3/article-view
Therefore the author chose to mimic the ajax requests the browser makes when using the site on the desktop