If a Google account compromised all of the assigned features are available at the web console anyway, having ssh access doesn't add that much risk.