For me, it's just the easiest fix whenever somebody shares a tweet with me, and it fails to load, or shows me some forced login popup. I just click between x and .com in my URL bar, write "cancel", and it suddenly just works.
Just looked at it. Unfortunately it requests permissions for all domains, not only the relevant set.