I'd say ignore the evil/not issue and just assume that Google, like any company, ultimately serve their own interests. If you plan to compete with them on searc

I'd say ignore the evil/not issue and just assume that Google, like any company, ultimately serve their own interests. If you plan to compete with them on search/ads/maps/gmail/etc, you might not want to be too vulnerable. If it's on a less critical part of their business, the damaged reputation to GAE is probably not worth it to them. In any case, outside the ORM your code can be plain Django, portable to non-GAE hosts.