Google sign-in routes through a secure Supabase authentication screen — this is expected and your data is safe.