Your Google Workspace Has Hundreds of OAuth Grants. Do You Know What They Can Do?

The Vercel incident is a good reminder: do you actually control what OAuth apps can access your Google Workspace?