Bugs are also marked private without any security angle involved whatsoever. Often, these are related to initiatives done in cooperation with so-called "partner

Bugs are also marked private without any security angle involved whatsoever. Often, these are related to initiatives done in cooperation with so-called "partners". For an open source project, Mozilla appears to constantly settle on pretty shitty partners if it is true (as is alleged) that it's these partners that insist on secret communication shielded from any community interaction. Such shady deals in smoke-filled backrooms are one of the small number of things that are hard to impossible to pull off in a community-driven project without constantly pissing off contributors.