Limit OneDrive backend's access scope to an "App Folder" only?

Feature request (security)

Onedrive API supports limited “scopes” for the access tokens. It seems the current token has onedrive.readwrite access scope that grants duplicacy R/W access to all Onedrive files. If the Onedrive token could be limited to “App folder” only (onedrive.appfolder scope), then duplicacy would have access to only e.g. Apps\Duplicacy only.

This would be a great improvement from security point of view. Folks have their important data on Onedrive and the current token gives access to all of the data.