A single malicious OAuth approval can give attackers full access to your email and files without needing your password. Learn what happens and how to stay safe.