An App provider is asking for "View Setup and Configuration" permission. From what I see in the user interface, this is the area related to all Developments.

I have two questions:

1. If I grant them this permission, will they have the option of downloading all my code?
2. What permissions are granted by "View Setup and Configuration" via API?

Any insight will be highly appreciated
     S.