Using a custom schema for ETL and semantic model extensions instead of OAX_USER has been our practice for a while, based on guidance like this:
FDI: Replicating access of OAX_USER for a Custom Schema
The original blog we used to reference for custom ETL setup is now a 404, and we're finding a few other older articles have gone the same way. The credential-sharing risk is the main argument we have on record, but we've also seen "creating a custom database schema is highly recommended" in the Write Back doc without much explanation of why.
Is there a more complete/current write-up of the reasoning anywhere? Specifically curious whether OAX_USER's grants or synonyms get touched during patches/upgrades in a way that could affect any custom objects sitting in that schema. We already follow the custom-schema approach but would like something official we can point to for internal documentation rather than relying on blog posts that keep disappearing.