Vulnerabilities can be exposed by reporting them to the vendor.
Which will then be ignored because it costs money to fix if there are no consequences to not fix it.
alt Hacker News
Which will then be ignored because it costs money to fix if there are no consequences to not fix it.