Exactly.
If we want to be able to get OG "support" for modules that don't "know" about OG, without patching them or depending on their maintainers, we can't and shouldn't replace user_access.
By altering the user permission on the fly, we will achieve this goal.