baby bathwater much?

I find this discussion reductionist. Yeah, the embargo and disclosure process has always been flawed. But flawed processes often have non zero utility. From my own exposure to distro security I can say there is a surprising amount of useful discussion that leads to better end user mitigation and docs, dependency end of life decisions, toolchain improvement. We can't stop reporters from blowing embargos from their side, but we can keep setting expectations of professional behaviour. Organizations can still act responsibly and work together to minimize end user damage. Surf's up but at some point the stream of low hanging fruit will subside -- it would be nice for civilized conduct to survive meanwhile.