I recently learnt that Google still runs its privacy work as (apparently) a branch of security. That's how you get these screw ups: for security folks, Google isn't part of the threat model (that would make little sense), but for privacy purposes it has to be. Hard to align.
Quoting a tweet by @Independent ↗
♥ 116↺ 30