Explanation of ChatGPT Auth Access Risks?

What is the type of issue?

Documentation is missing

What is the issue?

Could we have an explanation of what the id_token, access_token, and refresh_token have access to? (Aside from the obvious of sending requests to https://chatgpt.com/backend-api/codex/responses.)

https://github.com/openai/codex?tab=readme-ov-file#authenticate-locally-and-copy-your-credentials-to-the-headless-machine suggests we can copy these tokens to remote machines, but doesn't give us any proper information about the risks of doing so.

I have the following questions:

1. Can these tokens be used to access ChatGPT (i.e. https://chatgpt.com/) conversations?
2. Can these tokens be used to access conversations from other codex sessions under the same account from different machines?
3. How do we revoke a single codex session? The web UI at https://chatgpt.com/#settings/Security only shows a single option to disconnect Codex CLI, which presumably disables all tokens.

Where did you find it?

_No response_