"If someone obtains one of your Application Specific passwords then they can use it to log in and access your data until you revoke that password but they canno

"If someone obtains one of your Application Specific passwords then they can use it to log in and access your data until you revoke that password but they cannot change your real password and deny you access to your own account." Ah. I think this is the key I hadn't understood till now. Thank you.