Fairly recently there was a story about somebody getting locked out of their gsuite account because their domain dns was hacked (IIRC) so a custom domain also introduces an additional attack vector.