Google does an excellent job protecting your data from those who are not authorized by it to access that data.
Sadly, however, the same most probably does not apply to Google itself or it's business partners.
The other thing about this is he wouldn't give a damn if someone did access his data. There are no state secrets in his communications with his daughter. Security is important for some things, but hysterical multiple posts from Google every time someone logs in from a different IP address are just annoying. There is no intelligence or common sense behind this kind of thing, which is actually surprising from a company like Google.