> After running it, macOS immediately started asking for multiple permissions, which in hindsight was the big warning sign.

From what understand of MoltBot, I would expect it to ask for a lot of permissions. I guess maybe they are prompted closer to configuration time in the actual app.