That’s one way to not do responsible disclosure and give the company a chance to address/fix the issue. I guess clicks on the blog are more important.