It wasn't a particularly likely exploitation route... The user had to already be double-clicking files they'd downloaded from a malicious webpage. At that point, it might as well have been an .exe file.
And after all that, all it can do is run a search query. It can't leak all your Gmail emails or exploit the local machine.
And after all that, all it can do is run a search query. It can't leak all your Gmail emails or exploit the local machine.