This is absolutely ironic since Google is known for their really good authorization system, but all of this is for nothing if you just give the AI full access on the drive. It seems they don't have the authorization to read the Drive folders with normal Google API, but they could just run rmdir on the root