Security researcher A opens a bug report on a tracker and writes a technical description and it sits there for five years and it gets zero replies and nobody cares.

Security researcher B hires a designer, makes a logo, catchy name and a website and it gets upvotes on HN and Reddit and media picks it up and the whole world gets a day-worth of drama from it, emergency meetings are held and things get fixed.