The vulnerability is what puts users at risk. The reporting reduces that risk. The fact that it wasn't 'responsibly disclosed' just means the risk wasn't reduced as much.

I HATE that these huge companies with massive budgets get so much free research and code review. They don't deserve it.

These...

[ more ]