All it would require is an AMP website that mimics the Google login page. It already says "google.com" at the top of the browser, and we've told users to trust that, so...
The google.com domain would also probably trigger autofill recommendations from some password managers, which would make things even more convincing and seamless.
