Answer
Before revoking a grant like this, confirm whether the application itself depends on it — some underlying-database privileges the application user holds support real functionality (including things like reducing downtime during upgrades), so a grant that looks unnecessary from a hardening checklist may actually be a hard platform dependency you'd break by removing it.