On: Google leaking 2FA secrets – researchers advise against new account sync feature

Or, maybe, that Google looks the other way while another entity uses your token.

With NSLs they can't tell anyone.