Google can neither truly verify an origin, nor do they have (or should they have!) the moral authority to determine an origin to be "good" or "bad". A security

Google can neither truly verify an origin, nor do they have (or should they have!) the moral authority to determine an origin to be "good" or "bad". A security breach is a security breach and needs to be shut down on sight. I would've done the same in Google's techie's position.