I wonder to what extent the security industry is self-reinforcing and how many of these vulnerabilities would be discovered by 'the bad guys' taking into account that none of them have these kind of resources. But now the rest of the world has to deal with the fall-out of the disclosure that Google got a head start on and can relatively easily deploy across their cloud. It feels a bit like the hero model to me: only we can keep you safe from the problems that we create.