Project Zero's whole brief is "end to end security" even outside of Google's corporate borders.

Then you'd be mistaken, because Project Zero has covered both Android and Chrome vulnerabilities.

And lots of windows exploited.

Google engineers basically fuzzed all vulnerabilities out of Microsoft's font rendering system for free