I haven’t snooped on the traffic but at the very least it was encrypted back to google. And I wouldn’t be surprised if it was also signed somehow.  If it was easy, somebody would’ve already cracked it, especially with all the brouhaha about them dropping support.