After closer inspection, it turns out that the problem was — as often — between the chair and the keyboard 
I had not noticed that a checkbox needed to be checked in the top right of the authentication page (see screenshot below).
Once checked, rclone has sufficient permissions to interact with the Google Photos API, and the error goes away 