As you readed in Security Considerations guide, you should not share any valid Access Token with others platforms and third party services.
Then… how can you send your topoos registered Track in KML format to Google Maps or other map service?
The easy way is send directly the API Operation URI call (wich its response is the Track in KML) to Google Maps, but as we said, you should not do it because the call contains the user Access Token.
The alternative is to export the Track as public cached resource and send its Accessing URI.
Items exported with this method are anonymous and you can share them.