I once reported a security bug in MS XML Core Services. They responded very fast. I included a demo of the exploit, but I assume they would have answered in a

I once reported a security bug in MS XML Core Services. They responded very fast. I included a demo of the exploit, but I assume they would have answered in a similar way if I had less obvious proof. So I think it's more about how a company (its owners) cares about its brand/image.