I created a flow that sends an email using the "Send Email (V2)" process and is using an environment variable connection reference within a solution. The connection reference is a service account email for Office 365 Outlook. Nothing complicated:

When a first-time user opens this app (App #1), it is asking permission for this Office 365 connection reference (and under their email):

My issue is that another one of my coworker's PowerApps (App #2) is not asking for permission for this connection reference even though the set-up for the connection reference is similar:

We could not figure out how they were able to bypass the permission?
The users are sending/receiving emails from the service account completely fine in App #2 (with the From field in the email showing "Service Account").
Is it the way the app calls the flow? Their flow doesn't use inputs from PowerApps, but my flow does pass inputs from PowerApps.
There are no security roles set for the users who are using App #2 in the PROD environment, and mine seems to require permission when a shared user tries to call this flow in the TEST environment:

I've even tried replicating their schema for the flow with a new app, but the app automatically adds this connection reference and is asking for permission.