Comment by josemando

That’s indeed a worst case scenario, but you know (an grant permission to) which data the apps have access to