You act like security vulnerabilities aren't important. If Google found that security vulnerability, how much black hat already found it or are going to find it

You act like security vulnerabilities aren't important. If Google found that security vulnerability, how much black hat already found it or are going to find it in the next 90 days? Sadly we can't know, that's why we need to set a schedule, there's no soon enough.