“A bug is a bug” is about communication and prioritization, not ignoring security. Greg’s post spells that out pretty clearly.
Yes, that's what I was criticizing....