Because it writes an iframe which then makes a request to google (so no javascript is loaded from outside the domain)
REV. ... Google Maps actually uses JSONP. It loads pages as elements <script>
and then the script calls a callback method that is already defined in your page.
a source
to share