github's fine grained scopes aren't even that good, you still have to grant super broad permissions to do specific things, especially when it comes to orgs