But just because an application is secure does not necessitate that it is respecting privacy laws

Exactly, which is the case for Google in general. Probably one of the most "secure" places to put your data, but from a privacy point of view self-hosting would be better, but then the security will be lower.