Nevertheless I find it more telling in terms of what the given company is about by their response to being shown a vulnerability than necessarily writing perfect software every time.