Android is a mess, but the really big issue lurking is GSuite OAuth. The "Google Docs" fiasco [1] is proof that for a long time they didn't even prevent imperso

Android is a mess, but the really big issue lurking is GSuite OAuth. The "Google Docs" fiasco [1] is proof that for a long time they didn't even prevent impersonation of Google functionality on the platform. The only options for GMail seem to be "access everything" so all the apps do that. It doesn't even seem to be a terms violation to use data for other purposes, I couldn't find that at all for the unenroll.me story. [2] They do have the technical means to offer more nuanced permissions. Things like "send emails and read replies on email threads it creates" or "access to emails matching this kind of search where new search terms would require a re-auth". It's not a priority though. In their defense, millions of people were giving away their passwords to a bunch of external apps and the current situation is better than that. [1] https://www.theverge.com/2017/5/3/15534768/google-docs-phishing-attack-share-this-document-with-you-spam https://www.theverge.com/2017/5/3/15534768/google-docs-phish... [2] https://lifehacker.com/unroll-me-the-email-unsubscription-service-has-been-c-1794593445 https://lifehacker.com/unroll-me-the-email-unsubscription-se...