I know it sucks, but I think the intentions were good here. By managing the disclosure in this way, the majority of users _should_ have been protected before pu

I know it sucks, but I think the intentions were good here. By managing the disclosure in this way, the majority of users _should_ have been protected before public disclosure. Of course that didn't happen, but that was the intent IMO.