Either that or they are getting ready present you with a C&D because what you are spreading around the internet is unfounded and damaging to their company.
I am not saying that is what they are doing but it sure is a possibility.
That being said...I still think you should release this security vulnerability