[tehwebguy]

If I follow correctly yes this is an obvious vulnerability. Someone at Google made the wrong decision to not fix this years ago and keeps doubling down on that decision.

If someone does a blog post like “Looking at the first page of 1 billion private Google Docs” they’ll fix it.

[balaji1]

basically they are unwilling to admit a mistake and fix a small issue. I have seen a few PMs become super defensive and double down on a decision.