System Certificates

Aka, you cannot untrust google's certs. And google can do whatever the fuck they want, and you cannot change or alter that behaviour.

So, if google wants to publish a root CA, that allows them to act on behalf of any other domain, they can do that. etc.