I've definitely had notifications I consider spam direct from Google before. Apple/Google are not trustworthy.