I found a comically bad example today with an employment agency website. They give you the option of uploading your CV from Google Drive, by granting them acces

I found a comically bad example today with an employment agency website. They give you the option of uploading your CV from Google Drive, by granting them access to EVERYTHING on your drive. No SSL either: https://twitter.com/ServerAngels/status/793390333723893760 https://twitter.com/ServerAngels/status/793390333723893760