This is a point I've made repeatedly on discussions about the value of privacy. It's not about protecting the fact you're gay or have some weird fetish or cheated on your wife or whatever. That stuff doesn't matter in the slightest. The important thing is that the establishment shouldn't be able to quickly pinpoint and disable every potential whistleblower and every other kind of threat to the establishment itself.
Corporo-government overreach is a concern for obvious reasons.
But it’s also concerning that any individual rogue employee could have malicious intent toward you for no other reason than you have something you might not want publicly known.
Outside of certain highly-privilege departments like high-level SREs (because their job description requires them to have root access on the boxes), individual rogue employees do not have this power. There are various access controls that prevent individual engineers from looking up data by PII, other than their own corporate GMail account or accounts they've been specifically authorized to look into by the account holder (usually for customer support reasons). In general engineers are only running aggregate analysis on a large number of anonymized records, and the logging & user info services enforce this.
Like I said, individual people are not interesting to Google.
