I thought it might be something like that. Twitter needs to fix this or developers like you will be facing the consequences of their actions. Facebook's permissions are much more granular.