Do make sure you take a look at this, long requested feature, currently available in open beta.
Offers much more granular and also permanent control over which API scopes a third-party app or service is allowed to access, even if the developers change the code. Today, if you set a service to Trusted, that includes all future changes in code too.
--
https://wheretofind.me/@NoSubstitute