That's not what it's for. It's to prevent user content from being served from the same origin as Google services. If the content were to be served from the same

That's not what it's for. It's to prevent user content from being served from the same origin as Google services. If the content were to be served from the same origin, scripts loaded from that origin would be able to access your google cookies and therefore would be able to access your account data.