Allowing a company to access your e-mail via a token is not very different than just giving them your e-mail password. I think the article does a poor job of d

Allowing a company to access your e-mail via a token is not very different than just giving them your e-mail password. I think the article does a poor job of differentiating the fact that this has little to do with gmail, and everything to do with third-parties that are trying to access your e-mail. Having an API is hardly something to be reprimanded over.