Sensitive GA account info exposed to all administrators

Hi there,

I just noticed that if you’ve authenticated Google Analytics by Yoast with a Google account, any administrator can then see a list of all the accounts, properties, profiles, in that account, and change them.

This seems to be a security / privacy issue.

It seems like it would be preferred if it only shows the properties under the selected account, and to change it an administrator would need to re-authenticate.

https://www.ads-software.com/plugins/google-analytics-for-wordpress/