The point isn't that you must trust google or anything, but that if you are serving users other than yourself, blocking the entirety of google isn't a viable option. In the case that you're only doing it for yourself, you likely have safeblocking disabled or know how to whitelist the safebrowsing endpoint yourself (it's a separate domain) that it's a non-issue.
> if you are serving users other than yourself, blocking the entirety of google isn't a viable option
This is a fair assumption to challenge. Lots of developers co-mingling their traffic with an ad company doesn't mean everyone has to whitelist their servers. It's an impediment. But Apple has navigated those.
