I don’t think they actually said that about xslt at all. From what I saw they basically said usage is low enough that they do not care about it.

Can you point to somewhere that Google or anyone else indicated that they would support xslt once there’s a secure, supported version?