Hi Michael. Thank you for the heads up.  This is a setting that we can set to either 'read/write' or 'read only' and we didn't realize that it was set to 'read/write'.  We have updated it to 'read only'.   The authentication process will no longer ask for permission to send Tweets on your behalf and we will never do so.