Thanks for the (partial) citation. That’s enough for me to believe someone important outside Google actually believes there’s a security concern rather than Google just using it as an excuse to be controlling.

That doesn’t mean I actually accept the concern as legitimate. I’d find a postmortem of a real data breach where that was a factor at least a bit persuasive, and there are enough countries with disclosure laws I’m inclined to think there would be some if it was a problem in reality.