Please correct me if I'm wrong...
But if you include a stealth binary with otherwise OpenSource Code, doesn't that mean the binary is treated as OpenSource as well? If that's the case then open that little bastard up, find out exactly what it does, & pimp slap Google for including it at all, much less in secret. If not then I'd still vote to ban Google from making any non-validated-and-verified additions to the project as they have been doing, instead putting a hold on all contributions until/unless the code has been vetted not to pull shit like this.
<Sarcasm>Or you could just run Windows 95, the world's most secure operating system ever!</Sarcasm>
*Runs. Like. Hell*