Great write up! I would suggest using OAuth2 rather than the Less Secure App settings (https://cashweaver.com/blog/read-email-in-emacs-with-mbsync-...).

I also wrote up a guide for using notmuch, which has quickly become my preferred emacs email solution: https://cashweaver.com/blog/read-email-from-gmail-with-notmu...