Ensure that your disk images are not being shared publicly.
To avoid exposing sensitive information, make sure that your virtual machine disk images are not being publicly shared with all other GCP accounts.
Ensure that your VM disk images are not accessible by allUsers or allAuthenticatedUsers.