By that logic though the model would release 90 days from the last vulnerability it finds, so never.

I am talking about red teams being able to use the model for 90 days before everyone has access, since it's the model that's finding vulnerabilities.