Didn't realize that. Fixed now to only have read-only scope.

Edit: Obviously, we aren't going to do anything malicious with your data too, but apologies for the oversight.