That doesnt surprise me. They will let highly problematic security issues persist for weeks