In this scenario, Google is still a trusted dealer.

I just posted a general solution anyone can implement without needing Google as the trusted dealer: https://hackertimes.com/item?id=48760492