Responsible disclosure does not assume the vendor acts in good faith.

You’ve never been sued then.

Putting people and their personal information at risk because you want to make a point about the dangers of zero days (which everyone is already aware of) is woefully unethical.
Undisclosed zero days in the wild have always been part of the threat model.
a large percentage of vulnerabilities are not disclosed responsibly and are only fixed after damage has been done.
This is not a good argument.

Hopefully I don’t need to demonstrate how this also isn’t an argument that doesn’t hold itself.

The community benefits from skilled people handling things properly.
A [skilled] malicious threat actor exploiting a system doesn’t report it either.

And unskilled people now have access to skilled tools that doesn’t handle things properly…. It’s not an argument people’s personal information is already at risk. It’s an argument that the tools people now have access do not properly handle things. Maybe teach the people that developed claude mythos how to Mitre & CVE responsibly ╮(︶▽︶)╭