Here's evidence to support that vulnerabilities should be publicly disclosed immediately. 

nostr:nevent1qqs9r2ax7asgkkgrzdws0seda0aejh3pvqdxdk7nalqk33q3a5zctrqpzamhxue69uhhyetvv9ujumn0wd68ytnzv9hxgtczyrxr0yynqu3tlfe79ru692sgxfcx3ppstjuqdplzpynu09sdhxgc2qcyqqqqqqg388znw