[VikingCoder]

The company with the bug is leaving their customers open to harm.

And Project Zero has notified that company of their problem.

If the company fixes their problem in a reasonable amount of time, then it's a Win-Win-Win. The users, the company, and Project Zero all win.

If you blame anyone but the companies with bugs that can't fix them in a reasonable amount of time, then your priorities are dead wrong.