Compared to other web business Google takes security seriously. You might want to report this to their bounty program for a possible reward. Now that Google has

Compared to other web business Google takes security seriously. You might want to report this to their bounty program for a possible reward. Now that Google has linked accounts through their services, losing an account without being able to recover it is really bad, as the attacker would gain full access to adwords, statistics, payments, cloud api's, google search history, etc, and any other service that use the Google account, or the gmail email for password recovery.