TL;DR - Google makes (arguably insane) claim that it previously acted responsibly with regards to fingerprinting, and says they will begin acting irresponsibility with fingerprinting in February.
Practical take-aways you probably already knew:
Today's Google may do or say anything to make an extra nickel.
Today's Google, while it employs some excellent privacy minded engineers, has not demonstrated an organizational commitment to user privacy.
It is probably wise to assume that the next serious data breach at Google will end marriages, get politicians arrested, get famous people canceled, fuel successful scammers, and have every other privacy impact you can imagine. We know the Google data pool is massive, and we have reason to believe it is incredibly personal. I'm aware that Google has anonymozation solutions in play, and I do not believe those solutions will be effective in a breach scenario.
I believe that the average person will likely be better off ten years from now if they interact less with Google services.
It is probably wise to assume that the next serious data breach at Google will end marriages, get politicians arrested, get famous people canceled, fuel successful scammers, and have every other privacy impact you can imagine. We know the Google data pool is massive, and we have reason to believe it is incredibly personal. I'm aware that Google has anonymozation solutions in play, and I do not believe those solutions will be effective in a breach scenario.
That would be an interesting experiment. Maybe cancel culture and public shaming will cease whene everyone realizes no one is perfect and lost people do shitty things from time to time.
The worse, it does not only using Google Apps or Services, but more than the half of existing webpages use one or another Google API (at least googleanalytigs and google-tagmanager.which log and spy the visitors and users.
Hard, very hard to avoid it, Googles eyes are everywhere, even in FOSS.
Yes, you can easily block the tracking crap being downloaded to your HD and added to your browser, almost everyone do it, but you can't blck the logging of websites which use the Google (mostly) and other APIs. They store your PC and browser data in their server, which you can't access. The only possibility is using a VPN and other which spoof or fake your data, so that is don't have a real value. To use a mail which permits to mask your real mail direction, because your mail is an unique identifier which can be tracked all over the web. Using Image share which delete the EXIF data (vgy.me eg., Read always PP to see with which companies are shared your data, and some protections more to patch the worst privacy holes, but forget 100% privacy in the moment you goes online, it's only a myth to calm the people which intent to stay private with their shitty PC against the tech of the big ones.
I haven't read it all, but some glaring changes stand out in regards to fingerprinting (no longer prohibited) and device unique identifiers (no longer prohibited from gathering). Basically, Google wants to become even more lax with how users are tracked by their advertising partners
To the best of my knowledge - from a spirited but doomed attempt to read Google's privacy policies - Google is committed to deleting your location history after sharing it with 10,000 or so vendor partners.
Each of those vendor partners have pinky promised to comply with the rules outlined in the same privacy policy that I failed to read.
For context, I'm not convinced any living person has read the entirety of Google's privacy policies.
Sadly, I'm quite confident - by the law of averages, human nature, and corporate corruption - that not all 10,000 trusted partners also deletes our location data history.
Google does take privacy preserving steps to anonymyze what it shares.
My educated opinion is that no amount of attempted anonymozation is sufficient for the breadth, scope and quantity of data that Google collects.
Shorter answer for you: yes, I believe that is a corporate lie. True only in technicality, but likely false by any reasonable persons expectation of what "delete" means.
Pretty sure Graphene doesn't do much about fingerprinting on its own, it's nearly entirely up to the browser. They mention some of their plans to address that with Vanadium, but make no claims as to how effective it is now (at least on the features page).
Yes but do you use PiHole and a solid VPN? Do you spoof your browser's useragent? Even then, some would argue that you are not safe enough from Google's prying eyes.