/webhooks/subscriptions >> Must provide valid app token but bearer present

Yeah user token for the topics that require a scope.
Public data like streams/follows will work with the same app access token.

It’s all about describing the “owner” and whilst for subscribers the owner is the caster, webhooks belong to the developer