Installation fails on accounts with Advanced Protection enabled

[skolima]

I guess this would be niche, but Google now defaults new accounts to Advanced Protection, and has automatically upgraded millions of accounts that have had attacks against them in the past. Error message when trying to install:

Authorisation Error
Error 400: policy_enforced
Advanced Protection prevented your Google Account from being signed in. This security feature stops most non-Google apps and services from accessing your data to keep your account protected.
Learn more
Request Details
The content in this section has been provided by the app developer. This content has not been reviewed or verified by Google.
If you’re the app developer, make sure that these request details comply with Google policies.
access_type: offline
login_hint: [my email]
hl: en_GB
response_type: none gsession
redirect_uri: https://script.google.com/oauthcallback
state: ACjPJvEzp_CtBeHcRUzgVbvpkjnWSt3-gl7gHvGJewLXw2PR3vLjAuBi9Raqn9cyJ7Kynd2Pl2U
app_script_properties: AIXpZZnTuB83IgZGkag41bFKKUNHIiJIa0XvI4WUpow0Qbed2JHjpPbGsLi0V2tnBI1kAAe-o7zYG4kMFYLZcqGZpJuAIb5nmuHE3eRqEhgTKKdNWv5hgmmE6hh4H87JCEr8KIN2uLQx3p0OxD64NIE-4Vu-_OUIgIGy39i3KPSTx4UiaIliEZudVnqo0vr66sB3HuugwqPA
client_id: 274036499952-4aq47fh7m3e0d3t55mfbt5hrmjjauau4.apps.googleusercontent.com
prompt: consent
scope: https://www.googleapis.com/auth/script.external_request https://www.googleapis.com/auth/spreadsheets https://www.googleapis.com/auth/script.container.ui https://www.googleapis.com/auth/userinfo.email https://www.googleapis.com/auth/userinfo.profile openid