So what about having the dinosaurs sort out and coordinate release dates initially, then giving a few days heads up to LibreSSL (and others).

At least it would minimize the risk of zero-daying LibreSSL users.

... but I guess, this isn't where the problem is?