Overreaching app permissions a security threat, or “this is why we can’t have nice things”
Third-party apps often request more permissions than they actually need, including write access to for example your social media accounts. Once an app has been authorized, it has an access token basically forever until you manually revoke it.
This opens up another attack vector for hackers, which became abundantly clear this morning when pro-Turkish hackers decided to blast out a message all over Twitter.