It turns out that GMail has a security hole you could sail an oil tanker through. It also turns out there's a fix that any non-techie who can follow step-by-step instructions should be able to follow. If you use GMail, please read this post, and apply the fix.