Re:macOS High Sierra: Anyone can login as “root” with empty ...
by dolson on Tuesday November 28, 2017 @05:51PM
(#15802666)
In a case like this, I think it would be best to maximize the bad publicity. Bad publicity is the minimum Apple deserves for a bug like this. In my idea world they'd get a lot of bad publicity, and a significant financial penalty.
The idea of responsible disclosure is to minimize harm for you, the user. Not to minimize bad publicity.