I cannot think of a government agency less capable of conducting a proper security audit than the FTC. This is like expecting the Better Business Bureau to do penetration testing.

The widespread use of Google services and the relative lack of vulnerabilities speaks louder than any FTC funded research ever could.