“The signing key was stored inside the object it signs.”
Google hires the best security engineers on earth. One of them still mailed out the key with the lock. Forged cookies landed in pickle.loads, the oldest footgun in Python. The fix took two months, and $90,000 is cheap for a hole this dumb.