Update, May 22, 2025: This story, originally published May 21, has been updated with a statement from Google regarding the use of AppSheets during the Meta and PayPal instant account takeover attack ...