I once applied for a job that I thought was doing security engineering type stuff, and that's what the posting certainly described, but in the interview it quickly became a bait and switch, and they started explaining in detail about how their product monitors employees network usage in detail and the lengths they go through to make sure it is hidden on phones and workstations so employees don't know.
Nobody who worked there seemed to have a problem with it. I ended the interview early which apparently infuriated much of the company. Threats were made, but thankfully I never heard from them again.
You can say no to making bad things. Even if you work at Google, you can say no.