> It seems like Google's brand is benefiting tremendously from Project Zero in all of this.

Is that not how it's meant to work? They're paying to run a top notch security team which is actively discovering vulnerabilities and creating fixes for them. Should they not benefit from this?