or abused OAuth tokens. Your emails [5], files [6], and accounts

Summary from the TLDR newsletter

can be accessed without triggering email security systems, EDR systems, or most other security tools.