Well, sure. But as I understand it, most people at Google are running Linux on their desktops. I'd expect most browser testing to be taking place in VMs or on separate boxes, and under test accounts -- which would have made the level of infiltration described in the article more difficult.