"but the bigger problem is the tendency of third party integrations having default settings that are overly aggressive when it comes to access of user/site data

"but the bigger problem is the tendency of third party integrations having default settings that are overly aggressive when it comes to access of user/site data. " Our permission schemes are way too broad in general. I have done some tests with Zapier and IFTTT. For every integration you consent with them seeing ALL your data, being able to modify and so on. You also don't get a log how often the permission was used.