Comment by donatj

Who in their right mind is going whistle blow and risk their entire career over a security flaw that was detected internally, found to be unutilized, and was fixed in a timely fashion?

The fact that such a case even has reporting requirements at all seems nuts to me.