Basically that,
config page/view provides the buttons to a broadcaster to go do oAuth.
Viewer page has none of the oAuth stuff in it as not needed.
Each view/page of an extension is essentially different pages of a website. You can consider the dashboard and config views as pages where the broadcaster is “automatically” logged into your website via Twitch, so you have their channelID, then you can show the oAuth stuff there.
The viewer page doesn’t even have to have requestID enabled, and every viewer can be anonymous to your extension