According to this article, it looks like they'd have to elect to "self-ding" on their own report card. They're not going to self-ding for something they demonstrably would like to hide. For a highly central entity with as much influence over the flow of attention and other resources as google, it may be possible to mitigate or even falsify your own ESG score and get away with it, especially if other central entities decide it suits their best interests to agree.

Whose self-reported ESG scores are legit, which ones will we question? Who gets to decide? Just like with skimping out on support and copyright management in ways that hurt small users to extract value from them, these megacorps can and will extract value from the collective trust people had in the idea of ESG scores. People who call out the bogus score can be shadowbanned, throttled, or have a story spun up about how morally nasty or mentally deranged they, or the people they're connected to, are. This should keep "malinformation" (true information, that is agreed upon by the central figures as harmful to society) like this video quiet or confused enough to keep getting away with it.