Onedrive sync documentation misleading

Operating system

Linux

Joplin version

5.3.13

Desktop version info

Joplin 3.5.13 (prod, linux)

What issue do you have?

I'm a bit alarmed by Onedrive permissions. The manual claims...
"When syncing with OneDrive, Joplin creates a sub-directory in OneDrive, in /Apps/Joplin and reads/writes the notes and notebooks in it. The application does not have access to anything outside this directory."

However, the permission actually requested, and granted in fact gives joplin access to the whole of onedrive. Now the fact that joplin's design may 'intend' to access only /root/apps/joplin, and intends not to have any bugs that will for example delete or provide vector to expose your entire onedrive is neither here nor there for me personally. Given the opportunity I would and now have declined.

I had assumed from the description that the app was going to request such as Files.ReadWrite.AppFolder , Understanding OneDrive API permission scopes - OneDrive dev center | Microsoft Learn .Or some other folder share request permission that I was not familiar with.

Is this a bug?
Or otherwise I feel it is important the documentation is changed to make clear the access that the application actually will have.

I want to ask here before logging some form of issue at github.

Were you able to do something in Joplin that wrote to folders other than the ones described?