I'd instead blame the IT department that let users install arbitrary software.

Or how it is possible to grant broad permissions to their Google workspace account. That doesn't happen where I work. Only a handful of approved applications can connect.