this is an open and shut GDPR violation on a massive scale and quite deliberate, so it is quite astonishing that Google thought they could get away with it.
Google doesn't think in terms of "getting away with" things, because they don't believe that laws apply to them.