Other than violating the Bug Reporting program how else would it have been fixed given you failed to recognise the issue?

Are you yourself not at fault for forcing him to violate the terms in order to protect your customers?