It would be nice to at least have the option of not providing access to public repos. Actually, I suspect most people wouldn't mind not being able to manage private starred repos so perhaps all it takes is a simple change of the permissions being asked for.

I understand there are some R/W issues with the GH permission model, but I don't think there's any problems with separating access to public and private repos.