OpenSSL recently passed a change in their vuln announcement policy to give a major firm, which everyone here knows I think, 7 days advance notice of any zero-day that they were made aware of.

This was the engineer who helped set up the new policy: https://awe.com

To be honest, maybe it's a good idea. It depends on how much support Huawei is willing to give OpenSSL.