Why do my app need permission to orders, even without the scope?

Thank you for your reply.

But I still don’t understand how my current API permission scopes are related to orders?