Of course Google will take measures like this. I worry about other services being so easily enumerated. CloudApp is famous for this. Take for example: http://cl.ly/123ab
That does not point to a resource, but if you keep guessing (and this is easy to do with a script). You're going to get something eventually.
iOS is a blackbox, and all the security iterations in the world will not stop apps phoning home in plaintext without the user's consent. Unless informed consent is a given for iOS, users are still shooting in the dark.