We wrote the email services to use your own gmail accounts. Since the app is only clientside, you have nothing to worry about. Those permissions will only activate when you are on the app.
I'm certain you're right, but surely you can see how trusting a stranger on the internet isn't really a viable option. If you're interested in getting people to use your framework, it sure would be nice if there was a demo for your framework that didn't involve giving you so much access.