Why does the github integration require such broad permissions?

It looks like this has been previously noted and the workaround is to use the .org signin instead.

However, it still wants access to all my organizations… not sure why that is.