Brutalist

6 7 — Six Google products have more than a billion monthly users: Search, Maps, Gmail, YouTube, Android, Chrome. The seventh is the iPhone, which Google pays Apple roughly twenty billion dollars a year to stay the default on. The most beautifully designed consumer product in history is, functionally, a Google distribution channel with an aluminum chassis. Nobody else has two products with a billion users. Google has six, and writes Apple a check for the one they don't own. The penthouse is Apple's. The concrete is Google's. The city is built on the concrete.

Map the Google context your AI stack already reaches into. Pull the list today. Every agent you're evaluating — ChatGPT, Claude, Cursor, Perplexity, Cognition, Rippling, Notion AI — hits Gmail, Calendar, Drive, Maps, or Workspace APIs at some layer. That's your real AI vendor exposure. If the answer surprises you, your vendor map is wrong. The brand on the invoice isn't the brand on the liability.

Pick your AI platform vendor by the size of their security check, not the quality of their demo. Alphabet wrote $32 billion for Wiz this week — the largest cybersecurity deal in history — while three other AI products (Anthropic's Mythos, Vercel, Lovable) got publicly breached by classical security failures. Your CISO is going to make this decision with or without you. Make it with them. The vendor underwriting the floor is the one you want holding the liability.

Don't lock in your coding vendor for more than two quarters. Claude Code has the taste advantage today. But Google has six fragmented coding products consolidating under Antigravity this quarter, Sergey Brin un-retired specifically to "out-code Anthropic," and the integration with Workspace and Chrome is the leverage Anthropic can't match. The race is real. The answer changes by Q4. Trial. Re-evaluate in ninety days.

Keeping up with AI is hard. We know — we do this daily. If any of these action items strike a chord, or you simply want an Outsider perspective on how you can improve your business with AI, we'd love to hear from you.

Outsider Labs Advisory →

Thursday, April 23

1. Alphabet just made the biggest defensive move in AI — $32 billion for Wiz. The largest cybersecurity acquisition in history closed this week, above Cisco's Splunk buy that set the record in 2024. Wiz's team previously built Adallom, which Microsoft bought in 2015 for $320 million. A hundredfold return on the same four founders in a decade is what an incumbent pays when the acquisition is load-bearing to everything else. (Full analysis below.)

2. Sergey Brin came out of retirement to "out-code Anthropic." The LA Times ran the autopsy on Tuesday: Google has six overlapping coding products, even DeepMind engineers quietly use Claude Code, Kathy Korevec just left Jules for OpenAI, and Brian Saluzzo departed. So the founder is back. When a $2 trillion company needs founder mode to fix a product category, you're not watching strength — you're watching the one seam in the brutalist playbook getting sewn shut in real time. (Full analysis below.)

3. Two launches, three breaches, one week — and none of the breaches were the AI's fault. OpenAI shipped Workspace Agents. Anthropic shipped Claude Code /ultrareview. In the same week: Mythos got breached by Discord users on launch day via a contractor's easy-access URL. Vercel went down when one compromised OAuth token cascaded into GitHub and npm. Lovable exposed user data; the CEO apologized publicly. The models are shipping faster than the stacks around them are hardening. Audit your OAuth tokens this week. Seriously, this week.

4. The Information reports OpenAI and Anthropic are quietly reducing reliance on reasoning. Pretraining is getting smarter again, and the frontier labs are absorbing what they've been marketing as "/think" mode back into the base model. Kimi K2.6 — a one-trillion-parameter open model — went live on Replicate the same day. If your product strategy is built around a specific reasoning SKU, the floor is moving. If it's built on open-weight portability, the floor just rose to a trillion parameters.

5. Robot Ace just beat three of five elite table tennis players with ten-plus years of training. Physical AI crossed a boundary that consumer AI keeps promising and not delivering. Character.AI also shipped Memory this week — characters now remember users across conversations. The two most interesting consumer AI milestones of the month both happened below the fold. When the big story is infrastructure, the product stories hide in plain sight. Watch the ones you're skipping.

The Concrete Under the City

Apple sells you the penthouse. Google pours the concrete. Guess which one the whole city is built on.

Six Google products have more than a billion monthly users apiece — Search, Maps, Gmail, YouTube, Android, Chrome — and the seventh is the iPhone, which Google pays Apple something like twenty billion dollars a year to stay the default on. That number came out of the DOJ antitrust trial in 2023. It was $1 billion in 2014, $9 billion in 2018, $18 billion in 2021, roughly $20 billion in 2022, and most recent estimates put 2024 closer to $26 billion. A quarter of Apple's Services revenue is Google paying Apple to make the iPhone a Google distribution channel. Apple takes the money. Google gets 1.4 billion devices worth of live context.

Which is why the "Apple versus Google in AI" framing is backwards. Apple isn't Google's rival. Apple is Google's largest paid distribution channel. And the only stack with full consumer reach plus a real context graph is Apple's chassis running Google's brain. It's the stack most of the world is already using. The fight over who captures the agent-era economics on top of that stack is the only fight worth watching.

This week Google pressed the advantage on every front at once. The $32 billion Wiz acquisition closed — the largest cybersecurity deal ever written, by a wide margin the biggest Alphabet has ever paid for anything. In the same week three other AI products got breached by classical, 2005-era security failures. The message to every enterprise buyer was unambiguous: the model can be brilliant and the stack around it can still be on fire. Google just wrote the biggest check in cyber history to own the floor under that stack. Meanwhile Merck signed a $1 billion multi-year Google Cloud deal across R&D, manufacturing, and commercial. 330 Google Cloud customers are running more than a trillion tokens a year on Gemini. Forty are over ten trillion. Peter FitzGibbon of Insight Enterprises said at Cloud Next: "There is no more tire-kicking." Read that with a finance brain. The phase after tire-kicking is where the invoices get big.

The one seam in the playbook is code. Ugly-but-functional has always lost to beautiful-with-an-opinion in tools engineers spend eight hours a day in. Vim, TextMate, Sublime, Cursor — every winning editor had taste. Google shipped six fragmented coding products and its own DeepMind engineers use Claude Code. So Sergey Brin un-retired, specifically — the leaked quote from an internal all-hands — to "out-code Anthropic." When a $2 trillion company needs founder mode to fix one category, you're not watching dominance. You're watching a vulnerability getting publicly patched. Whether Brin has eighteen months before the Anthropic flywheel matures is the question that decides the next leg of the race.

The frontier labs are fighting over who makes the best model. Google is playing a completely different game. Make sure every harness worth shipping has to plug into Gmail, Calendar, Drive, Maps, Chrome, and Android. Let somebody else win the benchmark of the week. Charge the toll on the way in, harvest the signal on the way out, run it again. Cisco sold picks and shovels to the dot-com miners. ARM sold picks and shovels to the mobile miners. Snowflake sold picks and shovels to the data miners. In every case the miners changed. The picks didn't. Google is the picks.

Nobody ever wrote an Architectural Digest spread about a concrete foundation. You don't need one. You just need the building to still be standing in thirty years.

At COAI today: Full briefing — Apple as Google's largest paid distribution channel, the $32B security chess move, and why Sergey's return is the honest tell on the one place the thesis breaks — at getcoai.com.

— Harry and Anthony

Sources: