If you've ever try reporting vulnerabilities, you'll see that some companies won't ever fix the problem until it is widespread.