ANYONE can get in using social login (GMail)!!!

At first, I found this plugin convenient and great until I realized that anyone can log in easily using GMail login despite having the registration disabled. Once an outsider logs in using GMail, the account is created automatically. So that’s a huge red flag! This “so-called-security” is rubbish! It shouldn’t let in anyone except for the users being added by the admins.