Alarming treatment of security researchers made me think threats. Not communicating is bad. But is it more alarming than how Google handled the libwebp vulnerability for instance?