Sorry, I'm with Google on this one. Epic chose to go off the reservation (so to speak) and created a giant security hole while doing it. Woops. This part of the

Sorry, I'm with Google on this one. Epic chose to go off the reservation (so to speak) and created a giant security hole while doing it. Woops. This part of the article covers this: > Google's disclosure rules state that it reveals details of bugs to the public 90 days after reporting them to the developers responsible if they have not been tackled, but only waits one week after a patch is made "broadly available". So Epic made a patch available and Google waited a week. But: > ... [Time Sweeney] denied suggestions that the tech giant had acted in users' interests by refusing to keep the matter private until mid-November. The 90 days is for unaddressed bugs. This is nothing more than an attempt by Epic to fix bad PR from a security vulnerability they introduced (which arguably at this nascent stage might reduce public confidence in their bypassing the Play Store) by trying to deflect it onto Google. And I get the desire to skip the 30% cut but if you're going to do that you're then responsible for the safety of a person's phone and data. At least be up to the task.