Hacker News Reader

That's the UI that I remember from that time. Nothing in the auth dialog mentions access to Messages.

Yep, and the "Access my data at any time" basically lets them store and refresh access tokens, not give blanket access to things like messaging.