This is great! Now every app that allows their users to sign in using their Google account, and asked for blanket "let's read all your email" permissions, can s

This is great! Now every app that allows their users to sign in using their Google account, and asked for blanket "let's read all your email" permissions, can simply trawl through that data trove for this same email notification from Facebook, and have access to that user's account.