The ability to control app access on a specific SharePoint site and limit the sites that service account can access through the API, rather than govern it via SharePoint site access.

Reference: https://devblogs.microsoft.com/microsoft365dev/controlling-app-access-on-specific-sharepoint-site-collections/