Actually that's a feature, now anyone can host a simple webpage without any hassle the fact that this dude figured out a way around it is kinda cool but I'd rather they not remove this bec of phishing attacks.

On the other hand I can see how THIS specific attack is very dangerous: people might assume that they need to login to google to see the content hosted by google....