Hi @Steffan,
Thanks for writing in. For legacy reasons we need full access to OneDrive (Enpass works with OneDrive since the days when there was no App folder support in OneDrive) and OneDrive SDK shows you all those permissions as a side effect. We do not touch any file outside Enpass folder in you root drive. However, we are planning to migrate Enpass data to its own app folder in near future.
Thanks for your understanding!