You say that like it's a bad thing. If I am trusting Google with all sorts of personal information, I expect robust access controls to data and systems