And as an an Admin, GMail is awful. Microsoft knows what admins need and give them to tools to do it. There is so much that can't be configured with GMail, and they don't even provide a proper cmd tool like Microsoft does with their powershell modules. The only option is "GAM", a third party not supported by Google project [0].
Another example, the default routing rules page in the admin console defaults to only showing 10 rules. Every time you add a rule, the pagination is reset, so you get lost where you are and can't even see the rule you literally just added.
And as an identity platform, Google is nothing compared to Okta or AAD. Whilst it's wonderful that Google login is everywhere now, I can't for example, request the user do 2FA for particular apps.
Even the admin console only requires 2FA once a month, it's ridiculous.
And don't get me started on "groups" still being attached to distribution lists out of the 60s [1]. Or the inability to have shared mailboxes.
No one should ever choose Google Workspace over Office 365.