1. Security policy needs to reflect the level and scope of actual threats but not make technology unusable, to say nothing of unlovable.

2. Surely there was some catch that would make things virtually unusable and require some kind of massive service upgrade to actually work.

3. This possibility is erased if the recipient creates a Google Account, at which point the link becomes unusable for others.