[roxtar]

This raises serious privacy concerns for me.

Technical users can and will block access to portions of the API during authenticatcaion, but what about people like my parents? They might very well login, giving full permissions to the app, seeing that it's a trusted google URL while not knowing what they have done.

This is going to open a new can of worms.