They do make your exit the security zone on layovers though. That's the reason why I try to avoid CDG if i can.

Side note: All google servers are reachable for free over the wifi. (you can e.g. set up an app engine proxy)