Responsible disclosure and commercial fingerprinting aren't contradictory.