Ask for fewer OAuth scopes so your client actually clicks AllowYou paste a script for a client. They hit Run. Google shows “See, edit, create, and delete all of your Google Sheets spreadsheets.” They…