Google handles transactions for millions of consumers around the world so the concern is probably something like https://www.consumerfinance.go...
For example, if Google Pay on NFC-enabled phones is hackable and Google doesn't make some effort to provide security measures or compensation for exploits when they occur in the US, it's a US consumer protection concern.
FTFA the "exact scope of the CFPB's concerns is not clear, and its order does not appear to be final" so better to wait to see if they even move forward and, if so, what is that scope before jumping to any conclusions about Google's relative guilt or innocence. After all, they "do the right thing" for themselves first, everyone else second.
The rule on staying alive as a program manager is to give 'em a number or give 'em a date, but never give 'em both at once.