Are the similar token-based schemes for non-Gmail services? Seems like OpenID or the like could provide similar functionality to avoid having to provide your actual password to other services so they can look at your inbox.