If this results in reduced attention for vulnerabilities that don't have a site, logo, and marketing department, then what we've done is imposed a tax on securi

If this results in reduced attention for vulnerabilities that don't have a site, logo, and marketing department, then what we've done is imposed a tax on security research. Which is fine, because security work is extremely overfunded and we don't have globally critical infrastructure like OpenSSL developed by one or two dudes begging for donations.