It could also be that their semi-formal third party security team is now a formal team. Previously it was less than a full time project but more than a 20% project for many of Google's vulnerability researchers.

I guess that'd have the same net result though since it's much more feasible to hire for if it's been formalized.