It is a huge issue to have people who have no reason to have access to company information. You currently have to give integration access to every user if you want them to add a Google calendar. They should not be able to edit or have access to anything else, like field mapping or WooCommerce for example.