Remotely exploitable vulnerabilities in commonly used languages and systems are not the same as "every security bug". These are important because knowing about them allows people to make a (usually) easy fix to protect themselves from something that could destroy their startup.

Also, providing an exploit, rather than just the notification makes it clear how important it is to act quickly.