So wait, so this project that I use to store my passwords and that always seemed to take security and encryption seriously is leaving a public vulnerability unf

So wait, so this project that I use to store my passwords and that always seemed to take security and encryption seriously is leaving a public vulnerability unfixed because of "lost ad revenue"?? I'm baffled. I completely understand the need to support the project financially, but this answer leaves me feeling very uncomfortable.