From reading, it seems the 2013-2014 consensus was pretty much along the lines of:
As alluded to in that topic, most people figure that Google can get to their Gmail account if someone tried hard enough. But they don’t expect a Google engineer to just be able to easily browse through their inbox without being detected or their boss knowing about it.
All access control systems can be circumvented. That doesn’t mean that none should be implemented.