Fine-grained oauth is clearly better and something we plan to do eventually, but we're a very small team and we've been prioritizing building features and improving the design and relevance for the time being.