Great article, thanks for that (and for evidence #1236576 that I have no clue when it comes to software security). One rather off-topic observation: April 23 t

Great article, thanks for that (and for evidence #1236576 that I have no clue when it comes to software security). One rather off-topic observation: April 23 to June 25 is somewhat shorter than the 90-day window you mentioned. ("A few days before the 90-day public disclosure deadline...") What was the reason for that? It doesn't appear to be because those who were going to fix it had already done so - they published their fixes after the public disclosure. (I'm just curious, not criticizing or anything.)