Yeah. It gives read/write access to one file. The ideal for this use case would be read only access for one file. I think read/write access for one file follows the principle of least privilege better than read access for all files. https://developers.google.com/drive/api/v2/about-auth https://en.wikipedia.org/wiki/Principle_of_least_privilege