Do not let your domain expire with Google Apps
It took me about 10 minutes to write a python script that grabs a list of recently expired domains and checks each domain to see if it's a valid Google Apps domain.  This is a pretty serious issue, if indeed it's still possible to take ownership of accounts as the article suggests.  Hopefully Google has added some mitigating steps to keep this sort of thing from happening.