Security is more granular with GitHub Apps rather than GitHub OAuth. Personally I'm not using the GitHub integration with my company because of this, and therefore reducing my use of Super Agents. There seems to be a mismatch between company strategy and engineering. Why would ClickUp acquire Codegen to integrate more Agentic ML into its AI Brain, but not improve the integration that actually enables that for organisations which use GitHub, the market leader for stack management platforms.
An example of why GitHub recommends "Apps" instead of OAuth tokens for the best security available: