GOOGLE OAUTH IS BROKEN (SORT OF)

Summary from the TLDR Web Dev newsletter

A Google OAuth vulnerability allows former employees of organizations to retain indefinite access to applications like Slack and Zoom even after they have been off-boarded and removed from the company's Google organization. The vulnerability arises from the ability to create non-Gmail Google accounts using corporate Google organization email aliases and email plus sign forwarding.