Do you have any actual examples of this happening? It should be relatively easy to prove, by showing a disclosure from Project Zero without an accompanying ack

Do you have any actual examples of this happening? It should be relatively easy to prove, by showing a disclosure from Project Zero without an accompanying acknowledgment/post from the company... So far, most of what I've seen has been good for security. Not least the whole Spectre/Meltdown mess.