OP talks at length about being hacked. This, of course, would ring some alarm bells as far as protecting their user base.

Then, you post this contact form, which is not protected by https.

So, google is not dev-friendly. We know that. We have seen legitimate horror stories.

However, at what point should google step in and protect their customer base from folks who do not care about their safety?