They control a popular public dns server, a CA, a global local cache, and control over the most popular browser and phone. They have all the pieces to do almost seamless MITM.

"We see you haven't signed up yet for AMP, so we've done the work for you"

Yes, I get they wouldn't do this, but the fact that they could is a little scary.