If a person works at a company and uses their personal Gmail to log into their Confluence platform... and the company's Confluence does not use Google authentication OR two-factor authentication (2FA), could the Company potentially be posing a security risk to the person's personal Gmail data if the company gets breached?
Also... if this is not the proper place for this question kindly recommend where might be the best place for this question.