I think it's important for users to know how vulnerable they really are and for providers to have a fire lit under their ass to patch holes. I think it's standard practice to alert providers to these finds early, but I'm guessing a lot of them already knew about the vulnerabilities and often don't give a shit.
Compared to airing this dirty laundry I think the alternatives are potentially worse.
Good for Warren for keeping on top of this, but we need more than contingency plans. We need better laws to protect politics from corporate interests. I understand it's been this way for a long time in the US and that we won't be able to end it, but we've seen how dangerous and extreme the system can allow it to be now and it must be curtailed.
My pour over Honduras honey process actually brought me joy throughout my day today. There was nothing sad about it.