Google should not be rolling out unannounced changes, but Mozilla increased their risk by not pinning the HTTP version.