[zadwang]

This is possible with mbsync. Take a look at Archlinux wiki page for mbsync.

[taeric]

The page I found assumes you can get an app password. Those are disabled in advanced. Am I looking at wrong page?

[spear]

I used mbsync like this: https://wiki.archlinux.org/title/Isync#Using_XOAUTH2

On Fedora, I think I had to dnf install "isync" (for mbsync) and "libkgapi" (for the SASL XOAUTH2 plugin) and also pip install "oauth2token".

You'll need to get credentials from Google. I think this describes how: https://developers.google.com/identity/protocols/oauth2

If you have a plain gmail account (instead of Google Workspace, or whatever it's called now), one irritating thing is that you have to renew the access tokens (using oauth2create) once a week.