I believe the lead here is this part (and goes on):

"However, the real issue here is not just the bug itself and how easy or complex it is to exploit it, but how Apple handled the bug report."