Great point- it seems like the NY Post is following standard whitehat full disclosure procedures. My takeaway is that for any security vulnerability, as long as you append "because terrorism / for the children", you're in the clear.