Google is responsible for securing the software that makes up the Google Cloud VMware Engine service.
This software infrastructure is composed of the compute, storage, and networking software comprising the private cloud, and the software that interfaces with these infrastructure services. Google is also responsible for the physical facilities, physical security, infrastructure, and underlying hardware for the entire service.