Why do my app need permission to orders, even without the scope?

Hi @ModiKasper

Sorry for my delayed response! There is Order information visible via shipping and fulfillments data which is accessible with the read_shipping scope. A fulfillment object contain information such as order number, line items, and price - as well as customer address information. You can see an example of this object here: https://shopify.dev/api/admin-rest/2021-10/resources/fulfillmentorder#resource_object

Hope this helps!

Regards,