In fact, I wouldn't be surprised if the law says the exact opposite, i.e. that Google cannot reasonably extort that kind of data from its users, without a clear

In fact, I wouldn't be surprised if the law says the exact opposite, i.e. that Google cannot reasonably extort that kind of data from its users, without a clear intent, consent, and opportunity to refuse without punishment. At least the GDPR in Europe says so.