I fully share your distrust of Google, and I think it's unforgivable that they still haven't patched it, yet it's not obvious to me what of their own software w

I fully share your distrust of Google, and I think it's unforgivable that they still haven't patched it, yet it's not obvious to me what of their own software would rely on it not being patched? (Are you suggesting Google exploits this vulnerability themself? That seems unlikely to me--they can make their own operating system do whatever evil they want it to; why would they need to trick the user into doing it for them?)