OAuth allows the use of different scopes for different levels of access. So just because it uses OAuth doesn't mean it has to require major account access.

I assume the problem is that GitHub doesn't have sufficiently granular permissions (OAuth scopes), or that the requesting app doesn't use the correct scopes.