Over time, Google absolutely has been in a position to abuse data, and to some extent it has done so -- but honestly, if you compare what they COULD do to what they END UP DOING, they're not doing so bad at all. They mostly self-correct relatively nicely.
Microsoft, on the other hand, clearly does the bare minimum. They've had to be dragged kicking and screaming into actually providing a modicum of safety after more-or-less setting the stage for garbage tech security practices.