Comment by tptacek

Absolutely not. "Responsible disclosure" is a coercive Orwellian term coined by vendors, most importantly Microsoft, in the early aughts in order to set a norm that vulnerability researchers should work on vendor timelines and with vendor disclosure constraints.

Finding vulnerabilities that already exist in code can't be "creating the disease", for obvious reasons.