The thing that makes this unique is that Google is claiming that they have no idea whether the bug was used by third parties. In my opinion this already seems q

The thing that makes this unique is that Google is claiming that they have no idea whether the bug was used by third parties. In my opinion this already seems questionable. And it's a big deal whether true or false. If true it means that Google is likely engaging in questionable security practice by not even logging remote access to privileged information, if false it's far worse for them as it almost certainly means that they believe the information was accessed by unauthorized parties, and they then chose to lie about it.