Google’s two factor so called “application specific” (they aren’t) listing in account:security has a “last used” date. So you can at least delete the ones that you aren’t using much. (These are a bit of a security joke. Hah hah.)