While there are legit use cases to grant permission to emails, many 3rd parties rely on you robo-allowing them access. It's Google's duty to protect users from such apps
https://www.blog.google/technology/safety-security/ensuring-..., https://support.google.com/a/answer/7281227?hl=en, https://support.google.com/googleapi/answer/7394288#ensure-a..., https://developers.google.com/terms/api-services-user-data-p...
Certain people have determined to catch google in the wrong here even if that isn't the case so they are conveniently framing the situation and omitting key details.
Not to mention that having the user abdicate all responsibility to their actions in any situation is infantilizing and stupid.
2. In general, I'm defensive of Google, against all the unreasonable shite hurled at them. However, I stand my ground on email access to 3rd parties. My mom, your mom, your grandad, etc. aren't reading through legalese & Google blog/support. As the world's largest internet company, people expect Google to prevent these vulnerable people from being exploited.
3. Even the tech savvy rarely read TOS, especially on trusted sites like Google. They just expect Google to do the right thing.