I would agree on some of them being pretentious, specially with their tease about undisclosed vulns on twitter. But not all their members engage in this. I dis

I would agree on some of them being pretentious, specially with their tease about undisclosed vulns on twitter. But not all their members engage in this. I disagree on everything else you say. Google P0 has definitely pushed companies like Microsoft and Apple to be better and this benefits all of us. Their 90 day policy pushes vendors to make overall improvements in their build, ship and update processes, helping us get faster updates for critical vulns. They forced the leadership at these companies to put security very high on the list. I am also pretty sure that Google is held pretty tightly to their own 90 day disclosure policy. Google runs a full fledged bug bounty program and external researchers do find critical bugs in Chrome, Android etc. and don't get sued by Google. With hundreds of critical bugs in major software (and hardware) their contribution to security is nothing less than stellar.