Currently, when a domain has been purchased through Webflow with Google Domains, the only way to add the necessary DNS records for SSL is to delete the "Synthetic" records Webflow added when registering the domain.
This is a difficult and confusing step—and is not currently documented.
Thank you, Nate!
Agreed, this is not obvious at all.