It's about keeping google's device secure *from* the user.