IIRC, if they attempt to 'hack' this by falsely claiming they are uploading the contacts, they might be on the hook in the future if Google expands the scope of

IIRC, if they attempt to 'hack' this by falsely claiming they are uploading the contacts, they might be on the hook in the future if Google expands the scope of their mandatory pentests: https://cloud.google.com/blog/products/g-suite/elevating-user-trust-in-our-api-ecosystems https://cloud.google.com/blog/products/g-suite/elevating-use...