At first I thought this was likely to trigger the Streisand effect - but after looking through the document, if the bug exists in a separately installed application that cannot be used without registering, the statements by Ars Technica look to be quite misleading.

edit: To elaborate - the article seems quite sensationalist and attempted to imply that Win 10 by default "forces" an app on users that if used would expose their credentials. The users of the app are indeed at risk if they use the vulnerable plugin, however the article seems to imply a much more direct relationship with Keeper putting all Win 10 users at risk. This comes down to either bad journalism (not understanding the issue) or sensationalist journalism (trying to make the story seem bigger than it is). Either way I can defintiely see that this would cause harm to Keeper, and Ars continued to present the issue in a way that dramatized the risks, despite being presented with the facts.