Official sign-in, and only the accounts you choose
Each platform asks you to sign in on its own page, then you tick the ad accounts, Pages and properties the assistant may use. Accounts you leave unticked stay invisible to it, and each platform keeps its own encrypted token that is never used for another.