I would love to use RoundSync on Android or rclone on Linux to synchronize some of my files, but I hate the idea that those apps would then, theoretically, have access to all my passwords, mails, calender entries, ...

It would be great to be able to generate an app-specific password for this use-case, where I can specify which services the app can access (it would be only "drive" for me).