You keep spamming variations of this comment without explaining how could apps actually bypass security without several steps that the user needs to take in order for it to work. Are you just farming down votes for some weird reason or will you finally get to the technical details instead of one-sentence snarks?

The linked bug explains exactly how. The fact that you angrily slam downvotes when you hear something doesn't like doesn't make it "farming", just like rage and rants and bizarre accusations of conspiracy in this comment thread won't change the underlying issues that this is going to fix.

If it's a bug then the bug needs to be fixed. If the auth process works as intended it's hard enough to make it not something you could do by accident.

You forgot to ask yourself whose interests are being secured, and who/what is the threat being secured from.

Security is not an unqualified good. It's just mechanism of control.

The users.

As the threat being secured against, yes.

I'm sure Google considers users having freedom to be a "severe security issue." /s

this without the /s