But isn't the agreement of not releasing early more to do with coordinating with other vulnerable systems? The person who found the vulnerability wouldn't care if one OS releases before another. But if I am Ubuntu, I'm pissed if openbsd released early and publicly reveals a zero day that I'm not ready to patch yet.