the way the disclosed it is the industry standard. think of the biggest security research teams you know (e.g. google), and they follow the same process.

non-security people always seem to get up in arms about it, but there is very good reasons why the industry has landed on the process it has, which has been hashed out over a few decades.