This is why we have coordination with vendors PRIOR to public release, such that when the vulnerability is publicly disclosed, updates are available through sta

This is why we have coordination with vendors PRIOR to public release, such that when the vulnerability is publicly disclosed, updates are available through standard update pipelines Are you talking about Responsible Disclosure? Cause I thought that existed because if security researchers tell vendors in private only, then the vendors sit on it and do nothing, but if you tell the public first, users are vulnerable before the vendor releases a fix. Isn't the only reason there's a public release as a threat to keep the vendors honest?