It's an optional step[1] if you list your app as a G Suite marketplace app with domain only install. Of course, it makes sense if your app targets only G Suite customers and not general Gmail customers. It also limits the market reach.

[1] https://developers.google.com/gsuite/marketplace/security-as...