Comment Re:Maybe some access controls would help (Score 1) 215
If your'e on Google Apps for your Domain (or wait a few months), you can use 2-step verification. Anyone logging in from a computer you have not previously authorized would be prompted for an one time password (which can be generated through an application on your phone, or sent as a txt-message).
http://googleenterprise.blogspot.com/2010/09/more-secure-cloud-for-millions-of.html