I would be very likely to suggest your email was a scam. But as any such email would be coming from Google. Log into your google account with a browser and check the history of security notifications. If the buttonjs do not work, contact Google.

If you are using Thunderbird and deny those permissions, then Thunderbird will simply fail to function as a mail client. So don't post here later about Thunderbird not getting mail, not syncing your calendar and contacts. You have chosen to prevent that happening by denying the required permissions.