Let me also add a counter-point to my own point:
Google is subject to an absolute metric crapton of abuse. With a revenue stream that massive and warchest that huge, they are a constant target for scammers the world over. It's a total warzone out there, not just in terms of cybersecurity but also in terms of fraud and abuse. If you think Nigerian prince scams are bad, just put some serious (nefarious) brainpower behind that and huge botnets, clickfarms, payment fraud, stolen credit cards, identity fraud, the whole mess. There are literally tens of thousands of criminals out there trying to cash out in big and small ways every single second of every day. With little to no global prosecution of cybercrimes, Google has no recourse but to clam up when they sense a threat. So they are kind of within their rights to be so aggressively defensive.
The catch is the scale of this problem is so massive it absolutely must be automated. Responses have to be lightning quick to respond to scams at the speed of light. Risk analysis constantly charts the potential for lost revenue vs associating with fraud risks.
But counter-point to my own counter-point. That's really no excuse for being so unresponsive to actual users. Scaling to a billion users worldwide, everything a moonshot--this mindset underlies all of their failings. The thinking within Google is too focused on scaling up and Larry's mantra of "focus on the user and all else will follow" is complete doublethink, because Google fails at this so, so horribly.