> When he says Google shouldn't make this possible at all, I'm not sure what he's asking for? I thought maybe he was asking for something like: 1. Request pass

> When he says Google shouldn't make this possible at all, I'm not sure what he's asking for? I thought maybe he was asking for something like: 1. Request password before allowing access (which seems reasonable if the user hadn't entered it recently; I mean you have to do this for almost every other security setting in your account) 2. Allow finer control over the data. Say not allow it to download the entire corpus or only access to meta data, etc (though that can be probably too complicated for a regular user). Maybe this simply means different permissions when they want full access versus recent / continual access? I could see that being possible more descriptive.