I wonder how many others are hacked but remain undiscovered
Because Google is too big to fail, all Gmail traffic is essentially whitelisted and they can't be bothered to do anything about it.
Why would they burn compute on it when they have zero incentive to fix the problem?
Then you get into the forgotten early 2000s era google "postmaster tools" to try to poke through the chicken entrails to divine the nature of your issue.