The spam filter just broke at some time in the last year. I get 1-2 obvious trash spam in my inbox every day. Literally things with a subject like "You _WON_ !! ** our give_away!"
It’s not just you. Their spam filtering has been broken in general for a while now. Not sure what’s going on. I wonder if the volume of spam has just hit some critical threshold where it costs too much to process every incoming message.
Are you in the EU? Google's DPO or your country's data protection authority might want to hear about it.
Are privacy guidelines in EU countries so well defined that they take terms such as "password for an online service" into their vocabulary?
Even though postfix brings me headaches sometimes, seeing issues people have with google seems as setting it up was a step in the right direction.