You are right. Basically what I'm trying to say is they could do the same thing regardless whether they have your friends lists or not.

Indeed, I don't know if Google does the same thing.