I think it's going to be hard to get people to care about this until you can point to a concrete attack.

Like you said, Google and Bing have running high visibility widely used services that are vulnerable to this problem for awhile now. What attacks have there been in that time?