So if an user manually installs an add-in, agrees on the popup window that shows all the permissions (including the read email permission), this is somehow Google's fault?
It's not like they give permissions to third parties without user consent or knowledge