> You only get to be an asshat once.

TIL observing an exploit in the wild, after the details leaked during the embargo and pushing a fix for your customer is "being an asshat".

But they didn't observe any exploits in the wild. They may have believed there were exploits, but no evidence of this. Also no evidence that sought to communicate the need to end the embargo earlier. Instead they sought short term commercial advantage.

My advice to their customers is to leave, Chainguard will be the last to know about exploits in future.