For SmarterMail, Google's OAuth2 security audit is not possible. Part of the audit requirements for server software require a review of the hardware and network the software is running in. Since SmarterMail is licensed software and not provided as hosted service, there is no way for us to meet that requirement. There are other restrictions regarding some of the APIs we would like to use if we implemented OAuth2 for Google, but the audit requirements are the biggest obstruction for SmarterMail.
That said, we haven't seen any issues with configuring an App Password to link to a Gmail account for Message Retrieval, Email Migration, or SMTP accounts.
Andrew Barker
Software Developer
SmarterTools Inc.
www.smartertools.com