Isn’t it somewhat likely that a lot of shady crawlers pretend to be a google bot with their user agent?
Plus if you run adsense google with ignore crawler rules and visit the page from google ips and from some shady ip. Wonder if it is the same for sites using Analytics.
In the early days of smartphone use, Google and Facebook uploaded contact lists of every single smartphone user to their servers.