Google fixing vulnerabilities even before the release can only be good news, but one does have to be wonder why a whole class of such vulnerabilities are even allowed after so many releases?