https://stripe.com/blog/smarter-saved-cards

Perhaps if the Google rephrased their email to mention that this is to avoid interruption to your service it would seem less creepy.

Having to go and update your recurring billing because your card changed (the expiration date passed, or your credentials leaked and a new number has to be issued) would be a huge pain in the ass.

I'd hope there are some controls here - in the case of a compromise, that only accounts that existed before the compromise occurred will be updated. But it strikes me that something that does the right thing 99% of the time should be welcomed.