They may choose to oblige but they are under no obligation, moral or not. You can’t sue a maintainer for not fixing a security issue if it’s not part of a cont

They may choose to oblige but they are under no obligation, moral or not. You can’t sue a maintainer for not fixing a security issue if it’s not part of a contract, and the license is explicit about being As Is No Warranty. If you don’t like it, fix it yourself in a fork.