Hand waving, smoke and mirrors.
When the authentication and the service are both run by the same company on their servers, a huge potential exists for there to be nothing really "blind" about.
As many, many examples show; Google = Privacy Invasion. It's way too late for them to try and establish privacy credibility.
