Ah ok. “If a scope is not provided” is kind of misleading. I interpreted this a “I got a user access token that does not have the scope for this but nevertheless can get the count” but I did not understand this as “You can also use the app access token”.
Maybe the fact that the app access token can be used too should be added to the description.
Thanks for your detailed answer @BarryCarlyon