Hi. I am still not sure 100% if this fits in what you're looking for, since I am really new in this field, but the symbolic link to the cron job in /etc/cron.daily google-chrome -> /opt/google/chrome/cron/google-chrome is writable by groups and world, in fact the permissions of the *symbolic* link are 777, not the actual script to which it leads to, but that still can be dangerous since it is owned by root. This happens for all the Debian based OSes. I hope that helps you out a little :) Keep up the good work.

Best regards,
Tim