There have been a few exploits over the years relying on sites.google.com because of the need to use a subdomain to make things work for the exploiters.

I don't think I've ever seen Google advertise Sites either? Why not GoogleSites.com?