When those links are hosted on Google servers, publicly available to anyone handed the link to them?… how is that a private space?

This isn’t reaching into your phone and checking the information you store on it, this is checking links you added and shared with others using their service. They absolutely have the right to check them.