When I checked this morning Ingress also had full perms. I revoked and reconnected and Ingress only had basic account info. I was also queried appropriately.

Possibly this was fixed on Ingress sometime in the last X months but not on Pokemon Go.