Well. . . . What if we find the attack vectors, notify the companies then when they dont remotely patch(or cant/ignore as i assume is the most plausable option)

Well. . . . What if we find the attack vectors, notify the companies then when they dont remotely patch(or cant/ignore as i assume is the most plausable option), publicly release. I have a "smart" tv my wifw purchased while i was away on business, but theres no way thats being connected.