Is this even a problem with Google's certificate pinning? Chrome would prevent the user from accessing Drive if it was MITM'd.