Their converter probably has its own share of vulnerabilities, but the most it could probably do is start executing JS.
But probably in the context of your Google account: can access and maybe manipulate all your Goole Drive files. Maybe access mails in your GMail account? Probably not (other domain).