This was a Google oauth app and it was phished. So... No.

"The incident originated with a compromise of Context.ai, a third-party AI tool used by a Vercel employee"

So - yes, actually.