I think its known Google can masquerade as a "normal" visitor if it suspects you of cloaking (non identifying UA string and coming from a non disclosed google crawl IP)

https://support.google.com/webmasters/answer/66355?hl=en

I think they also use this to notify you in webmastertools when/if your site is hacked and is doing it to avoid detection by the normal user.