This is getting real close to "yet you participate in society, curious." Yes, Google chose not to use some software and chose to use other software. It's not ironic to decline to use some software because it increases the attack surface, and then find out that it's not enough and the software you did choose to use is vulnerable. It's just unfortunate.
My reading of the critique is that the criteria was unevenly applied. Decompression vulnerabilities exist in both libraries. They rejected one on the basis that it expanded the attack surface area, but accepted the other, despite similar claims applying to it as well.
It's pretty far from the "yet you participate in society" anti-pattern.
loading story #50234609