Matt Mullenweg is angry at WP Engine (owners of ACF). He thinks they don't contribute enough to Wordpress development, so he's enacted a "nuclear" approach to dealing with it. WP Engine has filed a lawsuit against Automattic and Matt, so not Automattic is claiming they know of a vuln in ACF and will disclose it in 30 days.