How to authorize rclone for Google Drive without disabling Advanced Protection Program?

Unless the Service Account approach is solving the issue, it seems not possible... check