This is why “responsible disclosure” has been rejected as a term among security professionals for many years now. Vendors invented it for self-serving reasons.

https://blogs.technet.microsoft.com/ecostrat/2010/07/22/coor...