To be honest and fair, in this situation I don't believe this is something accidental.

It probably just happens that the security concerns at ZDI don't match the security concerns at Linux(the vendor).

So, it turns out that this vendor is difficult to work with ....

I mean - heh