True, but only because it is OAuth. I like the overall concept if I don't have to share access to my inbox. Better if it was via forwarding to a specific address.
We are actively working on a gmail add-on which would allow you to not give us access to your inbox, rather, publish single threads to the site through the gmail interface. We have a few tickets open with Google to narrow the scope of the permissions available to us for exactly that reason! :)