Comment by torton

Did the flow ask them explicitly for scopes? If not, then they should know there are no restrictions.

It also seems, from the post, that customers were "long asking for scoped tokens" so who and why assumed that this particular token can only add and remove custom domains?

The author is getting roasted here and not without reason.