If they push updates for stuff like this to Chrome OS prior to disclosure is it not possible to watch chrome OS updates and reverse engineer exploits, at least in theory?
In microcode update case it's not much help for developing an exploit when it's encrypted.
Occam's razor: They do it like everyone else.
imagine a google peace maker. lol