Hi: the OAUTH 2.0 key is somehow associated with the SPx configuration, stored on the device. No idea what part of the flash memory stores it. If you delete the SP, the OAUTH key is deleted. No, you can't move it or otherwise reprogram it. It's a simple matter to just set it up again; it just takes about 3 minutes.
As to being security-conscious, the definitive way to invalidate the authorization key is to go to your Google account, and delete the authorization to the OBiTALK service:
Start here:
https://myaccount.google.com/ and run the "Security checkup". It will eventually display "account permissions", where you can see and delete OBiTALK's link to "Google Voice", and optionally if you imported your contacts to an OBi IP phone or via OBIEXTRAs, "Google Contacts import". It's a good idea to periodically run through the entire security checkup on all of your Google accounts.