I usually work on the backend and/or front end (Web). This is a pretty new world for me.
Like...is it so difficult to understand that someone hasn't had an issue like this before?
In a free market, you set the deadlines. If your publisher reaches out to you about a security issue you don’t have to fix it and they aren’t obligated to pull your product. In fact, you might make it into a feature or simply reconfigure a WAF.
Probably the closest thing to this would be in the early/late 00’s when some idiot would buy an ad in the paper/magazines. You’d have a fire under your ass for that. Even then, it was self-inflicted.
So the answer is no. I’ve never dealt with a publisher that had you by the balls, imposing random deadlines. There’s always been a human on the other end who has their own agenda, but also respected ours.