How is disclosing critical security vulnerabilities responsibly a bad thing, again?
In the "good" old days (some of us will recall mind you), those in power ($) controlled all information flow. We now have (though not as strong as I would like it) outlets in which an individual, without corp sponsorship, can have their voice hosted and maybe heard. This is a vast improvement.
those in power ($) controlled all information flow.
...replace '$' with 'knowledge (of bugs, etc.)' and that would be more accurate.