When I logout from a session logged in via google-login-plugin, it still logged in.

I know anybody can revoke grants from google but this behaviour is not helpful at all.

I tried with an incognito mode with chrome and the situation is same.

This means that anybody logged in outside the office, say public place, can leave the browser logged in.