I realize this can be a little bit (sometimes more than a little bit) of a development overhead to manage, but isn't the right way to do this is to only require the minimum oauth scopes upon signing up, then add additional scopes and re-auth at the time it's needed (i.e. when someone wants to perform an import)?

I tried logging in but it says there doesn't exist a team to join. So when I try to create a new team using gmail, it asks for my connections. I also assume it won't send emails on its own, but still it's information that shouldn't be necessary for me to share in order to join your application.