Yes, you still need the user to grant permission to your app for the scopes required, but EventSub doesn’t require the User Token from that OAuth process.
With EventSub you use an App Access Token, and on Twitch’s end they check if your app has been granted the scopes required by the user for the topic you’re attempting to subscribe to. Your app could generate an App Access Token, and use that 1 token for subscribing to every EventSub topic that you have access to (within the max subscriptions limit), from any user that has granted your app access to those topics.