You're literally better off using app passwords that grant total control, but you can revoke them, than OAuth, which you can't take away