vps上通过rclone同步到google drive 的疑问_美国VPS

如果我在vps上使用rclone一直同步备份网站到Google drive，然后如果这个vps被人黑了会不会我Google drive里的其他文件他都能看到了，我是说除了这台服务器上的数据外我网盘里的其他数据他是不是也能通过这个rclone来下载浏览呢
香港网友:可以，授权令牌都存在家目录的 .rclone 文件内呢。
拿到授权都不需要在你这服务器，在任何地方都能存取你的 Google drive 数据。
所以发现被黑要第一时间取消 rclone 的授权，重新授权会拿到新的 token 。
具体看 https://support.google.com/accounts/answer/3466521?hl=zh-Hans

福建网友:Scopes
Rclone allows you to select which scope you would like for rclone to use. This changes what type of token is granted to rclone. The scopes are defined here..

The scope are

drive
This is the default scope and allows full access to all files, except for the Application Data Folder (see below).

Choose this one if you aren’t sure.

drive.readonly
This allows read only access to all files. Files may be listed and downloaded but not uploaded, renamed or deleted.

drive.file
With this scope rclone can read/view/modify only those files and folders it creates.

So if you uploaded files to drive via the web interface (or any other means) they will not be visible to rclone.

This can be useful if you are using rclone to backup data and you want to be sure confidential data on your drive is not visible to rclone.

Files created with this scope are visible in the web interface.

drive.appfolder
This gives rclone its own private area to store files. Rclone will not be able to see any other files on your drive and you won’t be able to see rclone’s files from the web interface either.

drive.metadata.readonly
This allows read only access to file names only. It does not allow rclone to download or upload data, or rename or delete files or directories.
香港网友:Scope that rclone should use when requesting access from drive.
Choose a number from below, or type in your own value
1 / Full access all files, excluding Application Data Folder.
\ "drive"
2 / Read-only access to file metadata and file contents.
\ "drive.readonly"
/ Access to files created by rclone only.
3 | These are visible in the drive website.
| File authorization is revoked when the user deauthorizes the app.
\ "drive.file"
/ Allows read and write access to the Application Data folder.
4 | This is not visible in the drive website.
\ "drive.appfolder"
/ Allows read-only access to file metadata but
5 | does not allow any access to read or download file content.
\ "drive.metadata.readonly"
scope>
天津网友:多谢解答