Guess my point is that the user isn't explicitly requesting that this happen, so its more just like the application doing it.  Any application should be able to create its own application_users in accounts without needing a user's oauth permission.