Were the terms something like
https://chromium.googlesource.com/chromium/chromium/+/refs/h...
"11.1 The Software which you use may automatically download and install updates from time to time from Google. These updates are designed to improve, enhance and further develop the Services and may take the form of bug fixes, enhanced functions, new software modules and completely new versions. You agree to receive such updates (and permit Google to deliver these to you) as part of your use of the Services."
https://www.gdpreu.org/the-regulation/key-concepts/consent/
"Where should the consent request go?
Consent information must be easily identifiable by the user. It should be presented separately from any terms and conditions."
https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-re...
"You cannot rely on silence, inactivity, pre-ticked boxes, opt-out boxes, default settings or a blanket acceptance of your terms and conditions."
https://www.edpb.europa.eu/sites/default/files/files/file1/e...
"The element free implies real choice and control for data subjects. As a general rule, the GDPR prescribes that if the data subject has no real choice, feels compelled to consent or will endure negative consequences if they do not consent, then consent will not be valid.13 If consent is bundled up as a non-negotiable part of terms and conditions it is presumed not to have been freely given."
https://www.dpo-consulting.com/blog/gdpr-data-consent
"GDPR Article 7 further tightens consent. It requires clear requests (separate from general terms), a right to withdraw at any time, and documentation to demonstrate that consent was validly obtained. In short, you must prove that a person knowingly opted in. Records of data consent (who, when, how) are mandatory so that you can show regulators you followed GDPR consent requirements."
"You wanted a banana but what you got was a gorilla holding a banana and the entire jungle." - Joe Armstrong
You installed a banana with autoupdates enabled by default. Therefore you consented to installing a gorilla and an entire jungle
Anyway, joking aside, what's missing from this blog post is discussion of potential remedies for the alleged violations
It may be acceptable to Google to violate GDPR, etc. if the remedies enforced are merely a "cost of doing business" and not a threat to business success