They try to do a decent job. They don't send your password to Google. Given them credit where it is due. Unlike, say, another sv company who decided to ask the user's email password to auto-verify emails.