Because it's always better for only the "bad guys" to know about these exploits? If it's as dead easy broken as the article claims then you can be damn sure a

Because it's always better for only the "bad guys" to know about these exploits? If it's as dead easy broken as the article claims then you can be damn sure a lot of other people already know about it and aren't advertising it. And with such a poorly designed security model do you really expect the App developer to care enough to essentially sepuku in the app stores till they fix it? unlikely. You else where claim the author doesn't do enough to get the attention of non techie users to justify publishing this? What else could he have done? Spelled it out simpler? he only has his tech blog unless you think maybe he has funds to take out adverts and wishes to spend a small fortune alerting everyone that way?