How does Google's javascript API get around the cross-domain security in AJAX

Question

How does Google\'s API make cross-domain requests back to Google, when it\'s on your website?

Answer 1

AFAIK they use IFRAMEs.