I would argue it is a Google project, not a Google product. I would say the same of webp and Android. The original project may be made by Google, however every implementation is vendor-specific and may not have any calls back to Google. So, saying “you are assured zero privacy” is not helpful when the lack of privacy can be prevented by the vendor.
I didn’t know about that! Doesn’t seem to have a prompt for startup though?