When I originally built account login feature, there weren't fine grain options for the scopes.
I haven't had a chance to go back and change the code to use the new scope options, to reduce the access, now that has changed.
I hope to do that the next couple of weeks.
