The silliest thing about it is probably this. Google seemed to have just kind of forgotten to add code that would verify the rootfs on shims, even though they had everything they needed to do it already set up.
This really is not something that I have thought about very much as they very likely have phones where they are able to view all of the same content, anyway.