[bad_user]

Isn't fixing the vulnerability a demand of services?

[tptacek]

Doubtful, or a lot of consumer demands are technically extortion. In particular, the model jury rules for extortion tend to refer specifically to property (usually money).