Personal Google accounts that have not been used in at least two years could be removed starting in December as part of an effort to address security threats, the company said.