5 ms·

If they cared about security they'd mandate time to fix for the found vulnerabilities, or outright requested the source to be available