"Locally" here means, calls to the Gmail API are triggered directly from your browser(device) not on any third-party servers.
I totally understand your concern. Unfortunately, to perform those actions(unsubscribe/delete etc..) on your behalf while using the API, those "intrusive" permissions are required. If it wasn't needed, Google oauth verification team would not have approved.
I totally understand your concern. Unfortunately, to perform those actions(unsubscribe/delete etc..) on your behalf while using the API, those "intrusive" permissions are required. If it wasn't needed, Google oauth verification team would not have approved.
I tried to explain the usage for each permission here: https://www.inboxpurge.com/permissions