This is stupid. If one group says an exploit exists, and another says they fixed it, then one of the two is wrong! If you have an exploit, reproduce it! If it is not reproducible then there isn't much to be done!

Money and incentive should have nothing to do it. Is it free, do you make money are questions that do not matter, it is speculation on motive. You either have a bug or you don't and you either have fixed it or you haven't. I would expect engineers worth their salt able to communicate and resolve this for the betterment of everyone and shove their egos to where the sun don't shine.