Comment by jusssi

A GSuite admin can set domain-wide policy and per-user exceptions on what Google services the GSuite domain users can use.

Of course, there's some stuff you can disable that completely breaks how you'd expect e.g. Android integration to work with that account.