Really? If you’re personally impacted then surely you don’t want the media bringing attention to an open vulnerability where anyone can steal your data.

I’d opt for silence in this case and hope that some future update patches the bug (accidentally or otherwise).