This is an incredibly harsh and naive take. Authenticating logins at scale is an incredibly hard problem. There are tons of phishing campaigns and attackers seeking to get access to Google accounts all the time.

That they sometimes get it wrong sucks, but calling their attempts to do so "actual stupidity" is pretty rude.