@mackuba.eu Yeah, I think like you say, the problem is caused by OAuth surfacing what permissions you give more so than app passwords do, or to put it differently, that app passwords kinda hide this in a way that makes people think they are much more restricted/secure than they really are…