You don't need RARs to limit access. It's just a proposal to standardize very fine-grained control access. This is not very fine-grained. It would be perfectly

You don't need RARs to limit access. It's just a proposal to standardize very fine-grained control access. This is not very fine-grained. It would be perfectly possible to gate access to social features of github (such as starring) behind a plain old scope. Distinguishing "access to all your own repositories" from "access to anything else on github, as you" also is not a fine-grained difference.