I was recently reviewing my Google account session history and saw an active session from some small town in western China. Obviously freaked out, rolled all passwords, spent hours scouring what they could’ve had access to, etc.

Only for the next day, when Google updates the exact same sessions location to my exact real location on another continent.

Google of course won’t show the IP address of sessions anymore, just the “location” so there was no way of confirming beforehand.