Genuine Google apps use OAuth all the time ... really relies on the app developer not lying about its name and app logo, and that's just not good enough.