Best way to handle OAuth to other services

Use the of the term EBS, iFrames, and OpaqueID’s is indicative that you are working as an extension

Is this correct?

As per

  1. Extensions may not request or require OAuth permissions from extension viewers.