The issue..
.. here was that this application managed to circumvent the 'Allow this application access..?' page which is normally displayed. I knew from the bad grammar that it was fishy, but as the warning page usually includes a link to the facebook application page I thought I'd sniff out a few more details.
No warning; as soon as I clicked a notification link it added itself to my applications.
Should this be possible? I was under the impression it wasn't.