I don't understand.
Don't you have to explicitly allow an app/site to post tweets on your behalf? Why not simply refuse to allow it? I see no reason a service has to rely on this permission, and if they do it's a great reason not to use it. What am I missing?