One of the things i admire about you is your rigor. Im sure youd agree on first principles: best practice is to withhold disclosure until the harm is mitigated with patches. That does not change beca...