[pdpi]

"A bad actor within the manufacturer" and "the manufacturer itself" are entirely different threats. There's no particular reason why Google would be more exposed to that sort of bad apple than Apple, or any other provider.