>given that it's hosted as a google drive document

While an amusing irony, the reality is that -- without special measures -- 99% of content either is hosted on or routed through infrastructure owned by companies with less than stellar history regarding privacy..