You're really trying to make your point here with examples from 3 years ago?

Things change fast in these cloud services - so would be good to know specifically which parts of GCP IAM are missing.