[pjmlp]

Yes, and how does the data get there?

[wmf]

Over TLS?

[pjmlp]

To Google servers....

[wmf]

No, it's TLS to a "sealed" confidential VM that Google has no access to.

[pjmlp]

So they say.