You stated that you're "sitting on one that doesn't even require an internet connection [..] I'm waiting for my model to go EOL before I release it"

I read this as "Wait until the model is EOL, hoping it won't be disclosed and fixed until then and also not fixed afterwards"

Is this not what you meant to say?

Not disclosing a vulnerability you found to the manufacturer (while the product can still hopefully be patched) is “not responsible”. I think that’s what the person is trying to say.