This cross-connection of services scares me as well. I once happily ordered a Pixel phone using my gmail account. The phone was stolen before delivery (the delivery guy handed me an empty box with a hole in it!).

I reported the situation to Google and they could confirm with the parcel company the delivery was not completed successfully (plus some additional background checks they did after requesting access to my account) and they refunded the order.

The thing is I was not brave enough to place a second order of a Pixel because of fear of risking closure of my gmail account if the phone in the second order was also stolen before delivery, so I ended up ordering a Nokia instead.