My guess: data for their Apps customers are backed by completely different set of servers/infrastructure. This probably allows them to tell large potential customers that if GMail proper is ever hacked, their data would be safe (as it's part of some different system). It may also give them extra time to pen test new systems to make sure it isn't hackable before deploying it to the people that do trust it with their company's email.