There is a SharePoint Site with a Site Mailbox App. How can one control who has access to this app? Can permissions be changed/broken? If permissions cannot be changed which permissions are inherited from parent?
Short answer, this app inherits permissions from the site hosting it. Check article on SharePoint Mailbox App permissions:
Task: Read, organize, reply to, or delete email from the site mailbox in SharePoint.