You're nitpicking. It's a week of security related work. It makes sense. The idea is that people dealing with new issues need a break - doesn't matter when the cve was assigned.