Why don’t I get a ‘same origin policy’ warning when using the Google Maps API?

The following might explain things:
http://markmail.org/message/5wrphjwmo365pajy

Also, they employ some script hacks (e.g. inserting a script into the DOM to get requested data, instead of XHR).