But they will still keep your credit card number forever if you ever give it to them.

Once it's been added, it can't be removed.

They claim it's for auditing purposes, but those "auditing purposes" shouldn't require keeping it attached to the account as an active payment method (which is what they enforce).

Yeah they could totally keep it for no more than 2 or 3 months and 99.999% of any problems with "auditing" would also be handled.

What about my google account? Would it run, but I won't be able to access it?

I think Google lost trust, which is hard thing to get back. I just speaking how I feel. And I don't get such feel using AWS.