Google has done a great deal of work to push and early-adopt new web security standards, including QUIC (which inspired HTTP/2 and became HTTP/3), by changing t

Google has done a great deal of work to push and early-adopt new web security standards, including QUIC (which inspired HTTP/2 and became HTTP/3), by changing the Chrome browser, Android, Google services, etc. They've also heavily pushed Certificate Transparency. And they've pushed for device encryption, as well, on both Android and Chrome OS. Those and many others are technologies that better support a web without backdoors and devices without backdoors. I'm not necessarily suggesting that they've done the most work in all those areas, and many others are doing critical work, some of which should get a lot more attention than it does. But Google is literally the biggest proponent, insofar as they can push it the most quickly because they control the most endpoints.