>Becoming aware of a bug does not suddenly put people at any more risk than they were previously in, prior to bug discovery. I agree, which is why I said "keep

>Becoming aware of a bug does not suddenly put people at any more risk than they were previously in, prior to bug discovery. I agree, which is why I said "keep[s] [...] millions of users at risk" not "puts millions of users at risk". An unfound bug is still a potential zero-day. With something as valuable as an iphone exploit, we know multiple entities are desperately looking for it, so I wouldn't err on the side of assuming that any exploit would not be found. (or put more succintly: If you've found it, someone else might've to)