Well, here we get to the eternal debate about whether this trumps other considerations. Back before vulnerability researchers started putting credible deadlines to these things, vendors would sit on patches for months while the vulnerabilities were being exploited widely and were open secrets. A rough consensus seems to be that the common good is best served by these disclosure deadlines.

Also there's the consideration that security-critical environments who pay attention these have much more value-at-risk than the average Windows user. You want your safety critical systems who pay attention to be protected.