Re: So Google...
If Google has found the problem you can assume other agencies have as well and are probably already exploiting them. Not publishing the results is really just a courtesy.
The real thing is: how does Google respond in similar situations? Does it take security reports as importantly as it expects others to take its?