Comment by mrweasel

I think he should just reject reports of vulnerabilities if they aren't accompanied by a patch.