All of them have different levels of pain.
Someone has never seen the advanced permissions tab...
There is not "eh, they're all kinda bad" left in your head after you try to understand that mess. And forget actually being able to validate your permissions, it's basically impossible without some actually licensed fake account that you can use for testing.
Also, in what world is "denying someone access to a folder" the same as making the folder invisible? What went through the head of the designer?
It's the only way I'm aware of to have a modern tech like office productivity suite that's genuinely compliant with security and compliance regulations applying to the most heavily regulated industries. Google's offering is not that. You can get there with mashups of other tools if you start with a compliant (but clunky) groupware live discussion offering and identity aware role based access to a versioned collaborative document store.
Most firms are not required to have this level of regulated compliance, so most firms don't have to put up with the downsides. If you do, it is the least worst.
Respectfully, I’d never describe Sharepoint as nice.
It’s been hell since the first time I encountered it 15 years ago.