Sure, that means those companies could impersonate users to jit.si, but that would be quite something, so I suspect they wouldn't -- at least for now. So you might trust jit.si with your meetings even though you might not trust Google with your meetings even if you trust Google for authenticating you to jit.si.