If they implement it in OIDC they basically randomize the mail address for every application? What about the other scopes?

https://auth0.com/docs/scopes/current/oidc-scopes