@dansup If you don't trust the admin, you shouldn't use the service. Pixelfed is open source, meaning any admin can modify the code to request more permissions and save all tokens.