The problem isn't just their sharing the data (although you'd be naive to assume that the data they collect isn't being turned over to at least the US government) it's the collecting and storing of that data itself that is problematic. The fact that they're using that data to manipulate us via advertising isn't much better.

The presence and centralization of the data makes it a very juicy target for all kinds of evil people.

But, like most companies, Google defines PII to exclude items (such as the Android advertising ID, for instance) that are PII.

We all know it's possible to identify you even without name or email, given enough data.

If it was easy, advertisers would be doing it already. Google is highly motivated to keep your data fire-walled from advertisers.

Except that statement is just wrong and misleading. Your personal identifying information is all the metadata that can be aggregated and intersected to directly identify you, your name just is a number in the database but it's directly identifying and tracking _you_. Google doesn't care about selling your name or email, that's not valuable to them or advertisers.

And "unless you ask us to" is the default behavior of almost all google products. You have to ask them not to, sometimes under penalty of law (GDPR), before they actually change their behavior.

"unless you ask us to" - it's defined in the privacy policy and clearly says it's due to the user taking an explicit action.