Active key is enough and the app doesn't have any access to it. It's the Steemconnect asks your active key in your first login. (To set the posting authorities..)
Later, it will be possible to vote by commenting, but if you want to create polls, you need to do that step in the first time.