Sort:  

Yes only when the server ask an access token using a refresh token.
If an app doesn't require offline access you're not concerned

Perfect, thanks ;)