They didn't release the patch out of fear that someone would quickly use the patch to develop an exploit, meaning an exploit is available shortly after the patch.

What they have achieved by delaying the patch is that exploits are now available publicly before a patch.

Surely this is the worse outcome.