Yes, EU is very bureaucratic - as the article shows.

Regarding Oauth it is a log-in by user requested from a third party. After log-in the third party app would have the same API access as the app doing login with user's id/pw.