Google: Malware abusing API is standard token theft, not an API issue

https://www.bleepingcomputer.com/news/security/google-malware-abusing-api-is-standard-token-theft-not-an-api-issue/