After removing a custom app from my user account, I can still use the refresh token and access everything. Essentially, removing an app does not revoke permissions. Why? This is a huge security concern.
Question
Removing app does not revoke refresh token
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.