There are dozens of stories of identical things happening to Google accounts so it's not as if they are any better.
Whatever you do (custom domain or not), you're always exposed.
And of course you're always exposed, I'm not sure why you'd mention that. It's no reason to just give up and do nothing.