There's also no reason why they needed to have write access to post code review comments. But for some reason they ask for it and you can't deny that part when hooking up their thing.
They should really mass revoke that privilege because I can't see any upside to it. Unless they have a plan for some future state where they will want write access?