Today in vulnerability coordination:
Vendor: "That's not a vulnerability, it requires X level of access and nobody should expose that according to our hardening guide"
Me: "Okay, so if I publicly disclose the backdoor password needed to exploit this, you are comfortable with that?"
Vendor: "You can't do that, it would put customers at unnecessary risk."