Google Workspace Marketplace SDK unexpectedly removing OAuth scopes from App Configuration

Question

I have a Drive app which uses the Google Workspace Marketplace SDK. It uses a service account which gets access to the necessary OAuth scopes after an admin has installed th