Github took the intelligent approach of separating identity from authorization. You have your own identity, which doesn't change. On top of that, you have a se

Github took the intelligent approach of separating identity from authorization. You have your own identity, which doesn't change. On top of that, you have a set of authorization permissions which can be updated, added to, and deleted from. Changing authorization permission X doesn't affect authorization permission Y. Evernote seems to instead have lumped identity and authorization together. And had only one set of authorization permissions: all of your stuff. So when the permissions change, they all change. This approach is nothing more than laziness. It's not just "not thinking ahead", it's completely ignoring 40 years of practice in the field.