My point is that asking colleagues you trust is not enough to conclude that nothing of this sort happened. Maybe your colleagues weren't aware of what was going on?

A third party audit would probably be a better option. But I am sure Google knows how to handle these cases better.