[brango]

Having built something like this myself the components you actually need to write are so small and simple the scope for security issues is minimal. All the infra scales automatically.

Also, this post only addresses data flowing in one direction into BQ. Presumably they're then using something like Tableau or the Google/AWS offerings to build dashboards based on this data. There aren't many places for bugs to hide unless the BQ perms are wide open.