Well $someapp_i_just_downloaded pretty much has free reign to do whatever it wants anyway since it's running locally, and probably even had admin rights at some point during the installation process. If it were malicious then it's already too late to worry about it by the time it's showing you the OAuth dialog.