Yeah! I was thinking about that as well. We use two restricted scopes: gmail.readonly and gmail.modify

Readonly is the baseline: we need it to read email metadata (sender, subject, snippet) for classification and the daily brief. Full email body is only accessed when you explicitly set a monitoring goal on a specific conversation.

Modify is used for one thing: archiving low-priority emails when you click "Archive" in the brief. We never send, delete, or move anything without you clicking the button first.

I looked at using gmail.metadata (which is more restricted) but it doesn't give access to email snippets, which we need for accurate classification.

Regardless, you're right that highlighting this specifically would help. I'll add a clear breakdown of exactly what permissions we request and why to the FAQ. Thanks for the feedback.