Google is shipping a new AI-powered Home speaker designed to listen to your every word, while the same company holds the keys to your digital life through its Authenticator app—but an open-source alternative from Proton lets you take those keys back.

The bargain Big Tech offers Americans has always been the same: convenience in exchange for control. Google's new Home Speaker, now up for pre-order at $100, comes bundled with six months of Google Home Premium—a $60 subscription value—powered by the company's Gemini AI. According to 9to5Toys, the speaker promises to let you "chat naturally" with Gemini Live, control your smart home devices with a single voice command, create calendar invites, and even find songs you can't name. Every interaction, every question, every idle musing in your own living room, routed through Google's servers.

Meanwhile, millions of Americans hand Google something even more sensitive: the two-factor authentication codes that guard their bank accounts, email, and digital identities. XDA Developers reported this week on a straightforward alternative. Proton Authenticator—free, open-source, and standalone—lets users import their 2FA codes directly from Google, Microsoft, Authy, and LastPass with a few taps. The codes are encrypted end-to-end, synced across devices on Android, iOS, Linux, Windows, and macOS, and backed up to Proton Drive or even Dropbox. You don't need a Proton account to use it.

The author at XDA made the switch explicitly over data scraping concerns: "with Proton, I know I won't need to worry about companies like Microsoft scraping my 2FA data." The same logic applies to Google, a company whose entire business model is built on harvesting user data to sell advertising.

9to5Toys framed the new speaker as a straightforward consumer product, highlighting the "$60 value" of the included Premium subscription and the convenience of asking Gemini to dim the lights and play relaxing music. What went unmentioned: every "Hey Google" command is another data point, another fragment of your domestic life catalogued by a company that profits from knowing you better than you know yourself. The Premium subscription, once the free trial expires, becomes just another monthly toll in Google's ecosystem.

XDA, by contrast, focused squarely on the practical case for leaving Big Tech's authenticator apps—open-source code, end-to-end encryption, cross-platform sync without vendor lock-in. What XDA soft-pedaled is the principle at stake: your 2FA codes are the keys to your digital life, and handing them to a surveillance-advertising company is a quiet surrender the Founders would have recognized instantly.

The choice facing ordinary Americans is not complicated. Google wants to be the company that listens to your conversations and holds the codes to your accounts. Proton offers a tool that is free, encrypted, and open-source—meaning anyone can verify it does what it claims. One path concentrates power. The other distributes it.

The open question is whether Americans will keep trading sovereignty for convenience—or whether the steady drip of privacy alternatives will finally turn the tide.