What are you talking about? Analogies are weak point makers even when they're accurate, but what you're describing as entirely unrelated to what happened.

This is Microsoft's bug that affects many programs. Was Microsoft informed before this exploit was made public? What does it buy anyone to throw this out in the public first? There is no indication that the exploit finder was hunting a bounty or denied a bounty. Afaict you fabricated a controversial story in your head then tried to explain it to everyone else.

I think a better comparison would be: Someone has left a child on a car roof. Someone else sees it and instead of telling the person, posts about it online.

This analogy would almost work, but the program actually makes others' computers vulnerable. So, it is more like deciding not to fill out form K7804 if a bunch of people's kids were on top of a schoolbus.

And also, disclosure actually makes attackers aware of the vulnerability. So, it is like informing a radio station which will broadcast out the message. And while many bus drivers listen to this ratio station, it is actually really popular among a set of people who enjoy crashing into misconfigured buses like this to cause mayhem.

I'm not sure how to fit the state sponsored bus crashers into the analogy. Actually I'm beginning to think it isn't a very useful analogy at all.