Is it possible to restrict the scopes available to a SPA

I’m just going to repeat the question because it wasn’t answered and I have the same concern:

What about 3rd party apps? Just because I am an admin, doesn’t mean I want to allow a 3rd party app to access admin functionality on my behalf, even though I have access.