Comment by chrisseaton

> 90 days policy is fine. If you can fix the problem, this time will be enough to hire an entire team.

Is 90 days enough to fully fix for example spectre and meltdown? I'm not sure all bugs can be fixed in 90 days. Some will take decades to resolve.