For security-related bugs, maybe. When I file bugs with Apple (which I've mostly given up on), they are usually marked as a duplicate of another still-open bug.

For security-related bugs, maybe. When I file bugs with Apple (which I've mostly given up on), they are usually marked as a duplicate of another still-open bug. So it seems that people actually file bugs -- free QA works! -- but there's not enough time to fix them.