An alternate headline: Project Zero finds a vulnerability and promptly discloses it to the vendor, vendor misses the somewhat reasonable responsible-disclosure deadline for fixing it. This is unfortunately totally routine. :/