3 ms·
Yes, that's why you disclose if they don't do that. Not if they do.
Yes, that's why you disclose if they don't do that. Not if they do.
Then it turns into blackmail. Indifference to their actions is necessary.
A patch for a security flaw exposes the flaw to anyone with deep enough pockets to reverse engineer the patch.
Disclosing the flaw even if patched helps everyone, including you and me.