I have Google's G Suite newly hooked up to a domain I'll call example.com

I have a Google Sites new-style site at an address like this: https://sites.google.com/example.com/example

I have the domain example.com held at Google Domains

I followed the directions here:

And set up custom url via the G Suite Admin panel such that https://www.example.com --> https://sites.google.com/example.com/example

It works through a CNAME record as described in the answer above:

www CNAME ghs.googlehosted.com

Right now typing any of the following into the browser ends up correctly showing the site (via https://www.example.com/):

• http://www.example.com/
• http://example.com/
• example.com
• https://www.example.com

BUT typing https://example.com does not work, and does not resolve or redirect to anything. I get this:

This site can’t be reached 

example.com unexpectedly closed the connection. 

Try: 

Checking the connection 

Checking the proxy and the firewall 

ERR_CONNECTION_CLOSED 

Things I did/looked into:

• this answer from google which doesn't seemingly address https

• There is no way to add the root domain in the G Suite admin custom url panel -- it's greyed out unless you add a subdomain.

• There is no way to add a CNAME record for a root domain: "A CNAME cannot be placed at the root domain level, because the root domain is the DNS Start of Authority (SOA) which must point to an IP address." ns1

How do I configure this correctly? Currently, I have the following A and AAAA records, per this answer:

@ A 1h 216.239.32.21

@ A 1h 216.239.34.21

@ A 1h 216.239.36.21

@ A 1h 216.239.38.21

@ AAAA 1h 2001:4860:4802:32::15

@ AAAA 1h 2001:4860:4802:34::15

@ AAAA 1h 2001:4860:4802:36::15

@ AAAA 1h 2001:4860:4802:38::15

Assuming that the problem isn't just that I haven't waited long enough for the SSL or something else to propagate, is there a way to get https://example.com to work in this scenario?

I feel like the answer is getting rid of the CNAME and changing the A records, but I don't see how to do that and still point to the Google Site.

I'm also willing to entertain some CDN solution if someone can recommend a reliable one.

I'm also willing to entertain downloading and copying the entire Google Site over and hosting it somewhere else if need be (but this seems to defeat the purpose of G Suite).

Thank you in advance.