HAhahahaha
"The Chocolate Factory is not happy with the state of open-source software security, "
Chrome OS is the problem, it is designed for data collection and marketing, NOT security. A marketing company will never make a "secure for the end user" OS because it is not their business, data collection and marketing is. If the OS was secure they could not collect data.
It's silly to buy into the hype of them promoting security, when the reason for the OS is the opposite. (well unless they are talking about their financial security)