Google requires public oauth apps to go through a registration and review process. And requesting special privileged/sensitive scopes (like access to read email

Google requires public oauth apps to go through a registration and review process. And requesting special privileged/sensitive scopes (like access to read email) causes increased scrutiny. I believe users are also warned about apps with sensitive access on an ongoing basis. Certainly not foolproof but hopefully helps assuage your greatest fears.