What if someone (Google) used Google suite to send 10k emails to fire people. Wouldn’t that be considered normal for the server for a day let alone a week. Yes I know I could have come up with a better example.
Those would be internal so I'm not sure they'd even count against your quota.
ye olde corporate reply to all bomb .. no more emails this week everyone, we have used up our quota