By integrating existing authentication and authorization mechanisms, apps can securely accessibility data and execute functions without increasing the attack surface. constrained hazard: has restricted possible for manipulation. must comply with small transparency specifications to users