A response of "WONTFIX" is still a response, sure, but not the one most would want for a security-related issue.