Out of curiosity, where'd you get the $20k estimate? Their docs [1] give a $15-75k range, but I haven't contacted either of the two companies actually authorized to do the audits yet and details about the process are a bit scarce.
Either way - it's a huge chunk of change. Would be happier if it were on the lower end of that price range for sure.
1 - https://support.google.com/cloud/answer/9110914?hl=en#Securi...