Good question. I think app-specific passwords have full access.