I assume they haven't fixed it yet because they don't consider it to be severe enough to prioritize a fix. So the reporter waits >90 days, then publicly disclo

I assume they haven't fixed it yet because they don't consider it to be severe enough to prioritize a fix. So the reporter waits >90 days, then publicly discloses. Isn't this exactly how it's supposed to work?