You can use the scope parameter to fine-tune what a client application can access in your Salesforce organization.

For example, you can now use OAuth to access Visualforce pages (previously you could only use OAuth for API calls) and also restrict users to only access Visualforce pages.