From the article: > Fundamentally, the accounts system is clearly consumer-oriented. A lot of this risk-based authentication seems based on the general premise

From the article: > Fundamentally, the accounts system is clearly consumer-oriented. A lot of this risk-based authentication seems based on the general premise that most users of the Google Accounts system can't really be trusted to set secure passwords and are their own worst enemies. > This attitude... might be true for consumer accounts I don't think this attitude is any less true for "GCP accounts". Maybe you can trust yourself to maintain password security, although, I would suggest that you might want to be a bit more humble. In any case, once you have other developers on your team, you'd be insane to trust them all to maintain password security.