isn't `neonctl auth` requested permissions too aggressive?

I'm trying to setup neonctl in my dev env. But looks too aggressive. This might make me change my mind of using neon.