With regards to #2, doesn't Twitter auth include permissions so most non-spamming sites shouldn't even have permission to tweet nonsense on your behalf? Or am

With regards to #2, doesn't Twitter auth include permissions so most non-spamming sites shouldn't even have permission to tweet nonsense on your behalf? Or am I misremembering? (As it turns out, the only time I ever used the Twitter auth was about a year and a half ago or so, I think.) With regards to #1, hilariously that's one of the problems that this sort of single-sign-on is supposed to solve.