All they have to do is implement the Endpoint Verification plugin. It's open source and any attempt from Google to prevent that would be obviously anti-competitive.