technically what Google is doing with openid is allowed, just.. unfortunate. You can't opt out of the "privacy" or have a named endpoint