Comment by DANmode

So security's too hard for Google.

But if this happens at work and we're using Google Cloud, I say "sorry boss, Google messed up".

If we're running our own servers, who do I blame?

That wasn’t GCP. Their cloud computing business is operated very differently from their consumer businesses.