I have Google's G Suite newly hooked up to a domain I'll call example.com

I have a Google Sites new-style site at an address like this:
`https://sites.google.com/example.com/example`

I have the domain example.com held at Google Domains

I followed the directions [here][1]:

And set up custom url via the G Suite Admin panel such that 
`https://www.example.com` --> `https://sites.google.com/example.com/example`

It works through a CNAME record as described in the answer above:

    www CNAME ghs.googlehosted.com

**Right now** typing *any* of the following into the browser ends up correctly showing the site (via `https://www.example.com/`):

 - `http://www.example.com/` 
 - `http://example.com/` 
 - `example.com` 
 - `https://www.example.com`

**BUT** typing `https://example.com` **does not work**, and does not resolve or redirect to anything. I get this:

[![error message][2]][2]

Things I did/looked into:

- [this answer from google][3] which doesn't seemingly address https

- There is no way to add the root domain in the G Suite admin custom url panel -- it's greyed out unless you add a subdomain.

- There is no way to add a CNAME record for a root domain: "A CNAME cannot be placed at the root domain level, because the root domain is the DNS Start of Authority (SOA) which must point to an IP address." [ns1][4]

How do I configure this correctly? Currently, I have the following A and AAAA records, [per this answer][5]: 

    @ A 1h 216.239.32.21
    
    @ A 1h 216.239.34.21
    
    @ A 1h 216.239.36.21
    
    @ A 1h 216.239.38.21
    
    @ AAAA 1h 2001:4860:4802:32::15
    
    @ AAAA 1h 2001:4860:4802:34::15
    
    @ AAAA 1h 2001:4860:4802:36::15
    
    @ AAAA 1h 2001:4860:4802:38::15

Assuming that the problem isn't just that I haven't waited long enough for the SSL or something else to propagate, is there a way to get `https://example.com` to work in this scenario? 

I feel like the answer is getting rid of the CNAME and changing the A records, but I don't see how to do that and still point to the Google Site. 

I'm also willing to entertain some CDN solution if someone can recommend a reliable one. 

I'm also willing to entertain downloading and copying the entire Google Site over and hosting it somewhere else if need be (but this seems to defeat the purpose of G Suite).


  [1]: https://support.google.com/a/answer/7392423?hl=en
  [2]: https://i.sstatic.net/6c6Pa.png
  [3]: https://support.google.com/a/answer/2518373
  [4]: https://ns1.com/resources/cname
  [5]: https://support.google.com/a/answer/2579934