There are more downsides. Given their example of how new webapps will seamlessly integrate into the browser by having their own toolbars and such (the google maps part), it would be very easy to craft a picture-in-picture phishing attack.