Full disclosure is the only responsible disclosure method. I am glad that they decided to be public about it.