App login uses Google OAuth. Connecting Search Console is a separate step and asks only for read-only access.