Comment by gumby

This is an important comment given the wild (though conceivable) speculations in other comments.

The subsequent sentence on the page also says that if you find a vulnerability in a third-party app you have to tell the third party.