> if the documents are publicly editable per a setting the user controls, this isn't a "vulnerability" either. These services advertise it as "editable by anyb

> if the documents are publicly editable per a setting the user controls, this isn't a "vulnerability" either. These services advertise it as "editable by anybody with the link" not "editable by anybody" There is an implication that people can't get the link without you giving it to them.