When someone compromises an account without obtaining the password, owner-only OAuth consumers can be used to create a permanent backchannel to that account (much like bot passwords). Doing that should require elevated security (reauthentication).