Ah yes, the endless holy war over what constitutes "responsible" disclosure and the concern over who benefits more, the attackers or the attackees? In this cas

Ah yes, the endless holy war over what constitutes "responsible" disclosure and the concern over who benefits more, the attackers or the attackees? In this case, the exploit was being actively used in the wild. That means bad actors already had access to this and it was the users who were in the dark. Now it may be added to the "toolkits" of scripters and people who buy exploit frameworks but the people who do real damage were already using it according to Google.