The Google oauth page does say that the third party will be able to read, delete your mail. It will boil down to user's assumptions if said third party consists

The Google oauth page does say that the third party will be able to read, delete your mail. It will boil down to user's assumptions if said third party consists of humans :) Then they will be obviously able to read it. That's why I never provide access to my gmail.