> but the easiest way to implement this would just be to update a timestamp every time someone logs in
You don't have to speculate here. They clearly say "Activity might include these actions you take when you sign in or while you’re signed: Reading or sending an email, Using Google Search, etc."
So it's not just "did they log in".