That approach to disclosure is about discovering vulnerabilities. Talking about something with a published CVE isn't really comparable.