[therealtbs]

They don't mean the Google Titan security key but rather the one that's offered to you when signing up to their advanced protection program.

People in the UK are sent directly to a chinese online store which means at that point Google has no control over anything anymore.

[Eridrus]

The threat model for most people in the advanced protection program is "I'm a human rights activist and a government sent me a phishing link that looked like a Google docs login, and I'm not that careful, so I put my password in it", not "I run a backbone network that Intel agencies would love to tap and they're willing to expend lots of money/risk for that".