It's generally the thing to do, whether governement or lone programmer —security is a collective matter, bigger than us.
Just like we notify people when there's a fire hazard, we don't just stand idle when many people are at risk of something.
Just like we notify people when there's a fire hazard, we don't just stand idle when many people are at risk of something.
And then they would all do it because everyone would prefer that they rather than a foreign government are the ones holding 0-days during the remediation period.