But posting the mitigation helps guide attackers on how to exploit the vulnerability, and do so sooner.

I agree. That's what I hoped they'd have released between preannounce and version release. I think it's the minimum and doesn't hurt anyone.