You actually do have the key in question though, so they did not claim that you have something you don't. Furthermore the change did not give them more access

You actually do have the key in question though, so they did not claim that you have something you don't. Furthermore the change did not give them more access than they had previously like you are subtly implying here. The app could already make attestations on behalf of the user since that is what it's designed to do. > If they automatically joined my keybase user to my hackernews profile without my consent, it would be just as egregious. Egregious, maybe, but also not a backdoor.