Hacker News Reader

Feels like click bait to me. They could use their own authentication token to use the Twitter API. Not mine.

Click bait in what sense? They are only requesting access to read (not post) tweets.

And the reason is because that's how Twitter sort of forces you to do it with their API rate limiting.