Don't forget that they're getting their tokens from an OAuth endpoint. In otherwords it's already tied to a specific user. Reddit could have simply said "third party api support is only for reddit gold users".