Hi. I have a question related to login with Gmail. So I created my EN account using the "Login with Gmail" option. I noticed that after my account was created, I can also try logging in using the regular email option, putting in my Gmail address. Of course, since I used "Login with Gmail" I don't have a password.
My question is: is there somehow a password that was created that I don't know about (that could be brute-forced?)
What I would have liked is that EN should say "There is no account for the username or email you entered." if I logged in, but I guess on the back end my account has been associated to the email address associated with the Gmail account I used.
This scenario reminded me of one EN user on reddit who complained that he/she got hacked even if they used login with Gmail account option. I thought one way that user got hacked is if they inadvertently supplied a password when they logged in using actual gmail email address, then forgot about it, then they got brute-forced. But that's just my guess.
P.S. - since I was paranoid about this, I just enabled 2FA to add an extra layer of login security.