Hey @adamu
This one always confuses me too.
The short answer is a domain level connection is a connection that has been enabled for 3rd party apps. That is pretty much it.
This is necessary as 3rd party apps have a different security profile than first party apps (you don’t have complete control over the code/server for the app).
John