Maybe they don’t have a publicly available issuance (challenge/response, ACME, etc) infrastructure for their Root CA. Or maybe they just want to keep google CA

Maybe they don’t have a publicly available issuance (challenge/response, ACME, etc) infrastructure for their Root CA. Or maybe they just want to keep google CA, limited to Google properties. The same way you put things in googleusercontent.com and not google.com.