Comment by Jerrrry

Not an exploit, it is intentional, and ironically, is a countermeasure against phishing.

We all dread the day our Gmail password stops working, but this is what we signed up for.

I know my gmail is safe, because I know that without the password, not even I can get into it.

This is by design.