I don't think it's just a communication issue. There's something really slimy about offering known-vulnerable versions of software for free and then charging for the security patches.