I've been doing this with Wireguard and Mullvad VPN for containers hosting users that can't always be trusted. E.g. low latency shared desktop with browser. I've had people watch pirated content on my servers without my knowledge.
Aren't you supposed to use "Sign in with Google" or which ever service to prove to the app that you own your unique id (e.g. email)? If you want Google APIs, then that's a completely different scope here.
I mean, I've been working in VR for years and it's really not that hard to stick a Vive tracker on a pair of 3D glasses. But what if you wanted 2 or more people to look at the same screen?
This is why I think things like Looking Glass or Google's Project Starline (probably using something similar to Looking Glass) seem more interesting. Though I haven't gotten to play with one yet and they're much more intensive to run than something like this.
The logo on their website doesn't load properly for me. My machine doesn't have the font "LucidaGrande" and if they read this, make sure you outline your text before exporting!