You say that as though "asking for read access to your email" was a reasonable request that a company might ask for and get. I mean, who knows what non-technic

You say that as though "asking for read access to your email" was a reasonable request that a company might ask for and get. I mean, who knows what non-technical users would be willing to give out, but if any service asks for read access to your email, it should be called out here and the entire technical community should make a real effort to let everyone know that that's giving away the keys to the kingdom, letting that entity basically steal your credentials for every web services you use. Obviously, if you use any kind of remote email service, whoever provides that service has some kind of access to your email. But nobody else ever should.