I reported an issue a week ago and they have had developers verifying it beginning of this week. And that was a low impact bug. The previous issue I reported took 4 months to be verified and then another 3 to be patched. So my view at least is that not everyone is handling leaks.