Most of the cases of Google "spying through home assistant" (along with the other assistants, Amazon, Apple included) while obviously invasions of privacy were generally (all?) legal.

At least in the US they weren't breaking any laws. I'm not saying they would never break any laws for financial gain, just that most of the breaches in privacy aren't technically illegal (thus the need for privacy laws)