Not every other program. I have seen apple bug bounty reports of others completed in a month or so. But I don't know what took so long for them in my case.
>But I don't know what took so long for them in my case.
Patching of the vulnerability probably, so they could weasel out of paying the full bounty.