Why does gitea-release plugin requires api key?

It is obvious why an API key, what is not clear is that the drone already has permissions granted by oauth-authentication, couldn’t the gitea-release plugin use that instead? Now I have to give drone permissions by both, oauth and api key. That does not make sense.