6 ms·

This isn’t about what’s best for Apple it’s about what is best for users. The way this was disclosed was bad for users.

• saas_co_de 9y ago
  In almost all cases immediate disclosure is better for end users who actually care about their security because they can take appropriate mitigation measures. Just because the vulnerability is not disclosed does not mean it is not being actively exploited. It probably is. Users who don't care about their security do not deserve to be "protected" at the expense of compromising the security of those who do care who benefit from immediate disclosure.