Mozilla security chief Window Snyder brings up the great point that ultimately the exploit finders are the ones who really control when and how the public finds out about a specific flaw.
"The researcher has all the power," Snyder said. "They control when they disclose it, and they control the idea whether or not the vendor responds in time."