This had been an open issue since ~2022:

https://github.com/orgs/community/discussions/37117

Lots of discussion and "this will never get fixed" comments (including from me) but hey...! It did get fixed! :-)

> “This change removes the “Act on your behalf” note in the consent page if the app is requesting only read permissions against the user account itself.”

I think this blog demonstrates the problem. To a lot of people this is perfectly straightforward. To other people I believe to be perfectly reasonable, they might think, “but my GitHub account is where I keep all my private repos.”