I suppose this is a question for an Australian, but what stops someone from just using google.com instead of the .com.au address? Seems like if I see that warning in the US, the filtering isn't done by origin of the request, at least on this level.