Those who put resources into looking for security vulnerabilities find a lot. Of those groups, most have better things to do with those vulnerabilities than report them publicly. Who else is Google even competing against here?
There are lots of other vulnerability research teams. Google happens to have one of the best; they've recruited a decent slice of the best-known vulnerability researchers and then done a pretty excellent job of bringing up new people.