Which is where the “app” access control comes into play. Se Timbl’s explanation in this thread: Inter-app access control - #19 by timbl - short version is “no web-app can access any of your private data without granting explicit access to the web-app”. You have to, per webb-ap, grant it access to a specific part of your data.
2 Likes