There will always be holes. No software is perfect after all. However what differentiate is what people use with those holes. This findings was a good one as it alerts Google to the holes it found. Better this than suddenly someone crying foul over being hack due to a hole Google does not know of.