Comment by sethaurus

Google sells (and also owns) domains with exotic TLDs. It's reasonable to expect them to get handled gracefully.

And as the article explains, it was the prefix (web.*) and not the suffix (one.*) which turned out to be tripping their validation rules.