> the complicated part is developing heuristics that correctly flag malicious sites without dinging legitimate ones.

Its not complicated its impossible, google just don't care if they kick other people off their internet.