Earlier quoted context omitted.
1. your users do not need to have a developer account. they just sign in via your app and you get their access token as long as they are a fb user. 2. i have over 10 fb apps and fb did not have to authorize any of them to be made public so i am not sure how you got that info. you just click a button to make the app public. can you clarify?
https://developers.facebook.com/docs/facebook-login/review/w... lists only "public_profile, user_friends and email" as scopes available without a review, accessing posts seems to require a different one.
that permission only applies to the latter.