Google's Three AI Bets — Gemini 3.5, Spark, Omni — Which One Wins?
Google shipped three AI products in one hour at I/O — a frontier model in Search, an agent across Workspace, and a video tool that rewrites existing footage. Three real promises and three real risks each.
The Promise
The Risk
Three products, one hour
Google shipped three things at I/O in under an hour, and each one moves a specific risk for enterprise IT.
Gemini 3.5 Flash is now the default in Search and the Gemini app. Frontier capability at Flash-tier pricing — a real win for mid-market AI budgets. The risk is that a frontier model is suddenly in front of every non-technical user typing into a Google search bar. Confident wrong answers at billion-user scale is a different problem than confident wrong answers inside an enterprise chat tool.
Gemini Spark is the consumer agent — beta for AI Ultra subscribers next week. It takes action across Workspace and connected third-party apps. The promise is the first action-taking agent likely to reach hundreds of millions by default. The risk is that prompt injection just stopped being a generate-text problem. It is now an execute-actions-on-your-account problem. Send emails. Book meetings. Move files. If your Workspace third-party app permissions have not been audited in three years, Spark will use whatever Spark has access to.
Gemini Omni is the new video model. Generate from text, image, audio — and edit existing footage. Add characters. Change actions. Change what someone said. Production costs collapse for marketing, training, and accessibility. The risk is that every piece of video evidence now needs authentication. Authentic until proven synthetic is now synthetic until proven authentic.
The pattern is older than the products
After 25 years in cybersecurity, this is the pattern. A new capability ships to consumers before governance catches up. The directors who approved it find out about the consequences after the incident.
The decision in front of every IT and risk leader this week is not whether to allow these tools. They are already inside the perimeter. The decision is which third-party app permissions get audited first, what your video-evidence policy says now, and whether the search experience inside your organization needs a different default than the one Google is shipping.
Which one wants the full breakdown next week? Flash, Spark, or Omni.