Also, this isn't a bad move AFAICT (tightening policies and access to a very important API), but it's evidently a reaction to the backlash from that WSJ "exposé" about the scandalous fact that email providers allow third parties to read/manage your inbox... if you give the third parties permissions and access tokens. That was just dirty reporting and intentionally misleading average readers--the comments on that article were all akin to "I knew Google was reading my emails!". And I don't see this change mattering much to those people.