Regarding authorizing suspect logins, the only thing that would successfully authorize my email client access was visiting https://accounts.google.com/DisplayUnlockCaptcha

I finally set up two factor auth in gmail using FreeOTP and have Fairemail (fdroid version) configured using an app password. (I run LineageOS with no Google services installed or account setup so the OAuth method isn't an option for me)