I agree. Though I will say that IAP and gsuite groups backed IAM is nice.