If an app password has 'privileged' access to possibly sensitive account state. Meant for use with trusted clients.