One hundred percent agreed. Not sure why Google doesn't allow enforcement of this for Workspace accounts.

This is a great guide, I just wish Google made it easier to be "secure by default". It's very difficult to know all the various toggles you need to have switched on to be secure.