This is also ~pretty much true of all single-sign-on schemes like Apple/Google's. 
I've been annoyed for a long time that logging into YouTube on a device also technically logs me into Gmail.
Unique sites should get their own unique secrets.