Yes of course not cloud in particular, but web services in general. It just gave me pause because if Google messed this up, how many other services with less man power that we trust with our data have similar vulnerabilities?
IMHO, browsers' implementation of the web "security model" (I use the term loosely) is not the thing to base the security of your entire architecture on.
But hey, who am I to argue with Google?