Legality of extensions requiring viewers' OAuth permissions

It is allowed in the config.

oAuth is NOT allowed for VIEWERS. But is allowed for Broadcasters in the Config.

Extensions may not request or require OAuth permissions from extension viewers.