If vulnerability is actively exploited (and not just some theoretical) then it should be entirely fair that government gets to know it as the government might b

If vulnerability is actively exploited (and not just some theoretical) then it should be entirely fair that government gets to know it as the government might be one being attacked by it unknowingly. It's not disclosing it to public. It's making the companies disclose it to: * their actual users * the government You know, the government that a ton of info about every citizen ? Yeah they should probably know. It seems like "security experts" are really PR experts that don't want their big company to not be able to control the information about the vulnerabilities