Comment by dontbenebby

Posting it to HN is probaby reporting it to Google, in a manner.

Do you have MFA enabled?

I used to have issues with folks who'd obtain passwords to MFAless accounts and fuck around, but it's been a while since someone did... that.