I am not sure what is worse. A researcher actively using an exploit over 1 year with out disclosing it to the vendor or when a vendor sits on an exploit and does not issue a patch when informed.

I work for the FED of NY. We have to work a 35 hour week, so I did 3 days a week at 12 hours a day. Had a 4 day weekend every week. Very Nice. It was the night shift.
Now I work 9/70. Get every other friday off. Most of time I get a nice 4 day weekend.