By not doing responsible disclosure and giving time the developers to fix those flaws before going public, you’re not only publicly shaming the developers but also putting other users and instances at risk for absolutely no good reason.

Mega-asshole move.