Ah, good point. That could very well be it. Of course, the last issue I found was a security hole in google's core data api. Their review team admitted it was an issue, but rejected fixing it or rewarding a bounty, because they decided it was too esoteric. Even though it is literally a huge api key check that just doesn't happen. I've had bad experiences with filing bug reports to google :)