I think the far more substantial damage is from Google customers wondering what else the employee or some malicious insider could have done. You can bet that this came up in internal audits and customers' security assessments.