Crashed on first email I read from Gmail. Also, I had to enable "less secure access" in Gmail for aerc to work. Will try again after a few months.
Better to avoid gmail.
Applications can always implement OAuth 2.0, which is pretty open (and is what you'll need to do for other mail providers, not just gmail.)
To make matters worse they falsely point the blame at competitors and then people like you defend them.