“Using a ligature to get the Google logo into text-only interfaces is a reasonable product decision, but it shouldn’t have been added to a general-purpose font.”

Google Sans turns the text googlelogoligature into the Google logo. A domain with that name would have shown as Google.net in Chrome on Android. Google put a logo shortcut into a font that renders untrusted text.