Many sites and developers will request ridiculously over-broad permissions when establishing a new connection. At present this can be worked around by altering the URL to trim excessive permissions, but is a hassle for sites that require re-authing every few days.

Adding checkboxes to each of the requested permissions to allow account-holders to remove over-requested (data-scraping) permissions and unsafe permissions would alleviate this greatly.

The only risk would be the third-party site erroring if an actually-used permission is deselected by the end user, while enhancing privacy prevention and user control to slap away over-invasive marketing data collection attempts.