Link. Very clever moves. The key vulnerability was a lapsed domain (of course). Several Google flaws made it harder. “always be your own administrator. And if you’re a professional or friend setting something up for someone, give that person agency to solve problems without being dependent on you”