> Hey. Google Keystone tech lead here. We are aware of the issue, and we've stopped the release.

There is no legitimate reason for any install other than an OS upgrade to modify /var or any other system-related directory.

Ever.

> We're building a replacement that fixes the problem.

The fact that your team would allow any code which modifies a machine at the OS-level only reifies the concerns regarding Google's products.