Most Google Workspace tenants at small businesses were set up in an afternoon, years ago, by whoever was handy. The defaults are reasonable, but "reasonable" leaves gaps: one super admin with SMS codes, mail forwarding open to anyone, Drive links shared with "anyone on the internet", and OAuth a...
Source: [Dev.to](https://dev.to/runbookfoundry/google-workspace-security-audit-25-settings-to-check-today-with-admin-console-paths-i44)