stop adding new owners without notice and or approval

I've been using Cromojo for a long time. I'm not sure I've added any domains or the associated cromojo emails as owners to GSC accounts since before the name change. Over the weekend, I started receiving emails from a number of my GSC domains/URL prefix properties that new emails were added as owners. One of those was bulkindexing@bulkindexing-3993tpcfak.iam.gserviceaccount.com which I've confirmed is in Cromojo. When did the service start adding new emails as owners? This is concerning because it was hard enough to have companies be okay with adding some ones, but every owner of the account was alerted by google of new emails being added as owners. This has caused stress with others on the teams at three companies and has reduced trust in both me and Cromojo with our team.