Does this sentence "PAS Servers SHOULD support server-server OAuth and MAY support mutually authenticated TLS"

conflict with the DV P&S principles which state:

When the identity of the requesting or receiving party is important, implementations SHOULD use one or more of the following as defined in the specific Da Vinci IG:
the SMART on FHIR Framework ,
mutually authenticated TLS ,
the ONC FHIR At Scale Taskforce (FAST) security tiger team recommended solutions, or
the OAuth Server to Server Authentication as defined in the Bulk Data exchange IG.