> This really sounds like a (security) accident waiting to happen

That was my first thought. Just requires one vulnerability, and boom everyone who has a gmail account is at risk