Bug 1059100 - [email] 2.0-specific XOAuth2 mitigation

Just confirming that I understand this is the "The pop-up just sorta randomly pops up" case mentioned in your `review?` comment in the bug, and I agree this pathway should not be triggered, but good to know we have it covered just in case.