My reading is that a localhost web server on a port is the way to go.
This aligns with what nearly all the other cloud providers do with oauth.
> How am I supposed to do that sensibly on a remote server that I'm SSHing into?
If you want to see rclone's solution then check out
https://rclone.org/remote_setup/
It's a bit of a pain!
> Also that announcement seemed to indicate that localhost: redirects were going to be disabled too, wouldn't that make the local web server option not work either?
As you noted below that is only for Android, IOS and ChromeOS. I hadn't noticed that before though...
> I swear, obtaining an OAuth token to interact with my Google account is the new hardest problem in computer science.
Ha ha!
I note that you can get "rclone authorize" to do it if you want as you can set the scopes and the client id / client secret.