An XUL client would make a neat open source project. However commercially for Google to make it has little justification. I’m also waiting for XUL to start getting exploited like activex has. For the time being mozilla users have only really experienced security through obscurity in that respect.