Yes, but that would result in them not getting notified for any other vulnerability.