I'm not convinced Google is the gold standard for protecting PII. Data breaches can still happen despite internal controls, and their ad-based business model incentivizes data collection. The "high-level employees getting fired" story sounds like PR - how often does that actually happen? I'm not buying that they're leagues ahead of everyone else in data protection.