I'm aware that this might very well be "in the works", what's your point with that? Who is this "we" you are talking about? Are you going to publish a repositor

I'm aware that this might very well be "in the works", what's your point with that? Who is this "we" you are talking about? Are you going to publish a repository on github about what you believe is the ethical way to do this, and you expect Google to follow, or ??? What is this "one big cyberattack away" that you are talking about? Large sites get hacked all the time, and _nobody_ in power gives a single flying fuck. There are zero people held responsible for storing passwords in plaintext, or the admin password set to "123456" or passwords left as the default. Seriously, what are you talking about?