WebApps.SE ostensibly replaces Google support forums, such as the Google Photos Help Centre and the Google Drive forum. Stack Exchange is preferable, because answers are better quality (due to gamification with the reputation points system), comments are out of the way, and questions don't automatically become closed after a while.
So, I think people interpret WebApps more as a replacement support forum for Google products, and not so much a site that is exclusively focused on website applications. Thus, questions about security, such as this one creep in, which are not actually to do with web applications, but it just seems to fit here because it's about Google products. I wanted to flag this question to be moved to security.stackexchange.com, but that site wasn't listed as a migration option.
The purpose of this meta post is to ask: Is the Stack Exchange network as a whole trying to separate security questions about Google accounts from web apps questions about Google products, or are we just going to overlap with IT Security, and end up becoming a one-stop solution for all Google questions? I guess a lot of WebApps.SE users would know an answer to security questions, but I would have thought the expertise lies over there.
I think this is a critical security issue
, but the remainder doesn't really warrant it being directed to experts in security (who are not necessarily computer security people, as a whole) when it's really about using one particular feature of a specific application.