And Project Zero has notified that company of their problem.
If the company fixes their problem in a reasonable amount of time, then it's a Win-Win-Win. The users, the company, and Project Zero all win.
If you blame anyone but the companies with bugs that can't fix them in a reasonable amount of time, then your priorities are dead wrong.