This isn't making sense to me. Due to the same-origin policy, anything on google.com can only access the cookies and other application data stored there by google.com. Doesn't matter if it's JavaScript or an "AI", Google can't break the same-origin policy and read cookies from other domains. AI changes nothing about this.

(Google services' widespread use by 3rd party sites does give them more data, but they have that whether you load google.com with JS or not. And again, unclear how AI changes anything about what data is available to them.)