If you saw customer data was being compromised; financial data, government data, electronic patient records etc, and you had the fix. Would you do nothing?

The alternative isn't "doing nothing". It's raising the issue in the coordination group so that everyone can collectively decide on a new timeline if necessary, and you aren't leaving everyone else hanging out to dry.