Begging your pardon! I think you’re right.
Now, unlike when this topic was created (which apparently was where my brain was when I wrote my reply), we do have granular API keys. It should not be too hard to add a new scope just for theme management.
It might be worth creating a new topic in Contribute > Feature asking for a theme-developer API key scope. That seems like a fine idea.