To make it work in a way that preserves privacy as a value held by many current users of federated social services, yes.
But it seems like it can be implemented as is in any federated service and improve security for 3rd party frontend apps.
Maybe I'm missing something essential, but holding out for a perfect implementation which may not be broadly adapted might be a mistake on a developer's part if they want to provide value to ther service they're developing for.