So I use a separate gmail account for my server but forgot to mention in guide. I will add it. Although I wonder if its necessary if you use an app password. W

So I use a separate gmail account for my server but forgot to mention in guide. I will add it. Although I wonder if its necessary if you use an app password. What is the worst a bad-actor can do with the app password?