&gt; Do you believe Google is or isn&#x27;t a US company which would keep the most interesting stuff to itself&#x2F;NSA&#x2F;US-TLA&#x27;s?<p>They are a US-based company.<p>They <i>absolutely</i> would fix and&#x2F;or publicly announce any vuln in a library that they rely on, rather than keep quiet about it or -far worse- sell the vuln information.<p>Do you have a credible example of an instance where they&#x27;ve acted to the contrary?