Every year, audit yourself for things like this. I compulsively check my own security... security is a frame of mind. Delete unused oauth apps, dead emails. Flipside - offboard people quicky and completely when they leave your team.