"They're not fixing the security issue, but at least they're documenting it" is a weird argument to make.