When you give your mail client credentials to read your email , would you not expect your client to be able to read your mail?

On Android, when you give a third party client permission to receive SMS, you don’t expect it to have access to your SMS?