To be clear, people should not be using this thing that has no limits on what data it could be consuming. The CA thing people were upset about was that one user

To be clear, people should not be using this thing that has no limits on what data it could be consuming. The CA thing people were upset about was that one user could give CA permission to read their FB data and that meant that CA had access to anything that that user had access to (like data that their friends shared with them). This is the same, without it even pretending to be limited by the restrictions that CA was limited by.