I couldn't help but snicker a bit when I read this.
I have to strongly disagree with you there. I've seen MS go months without fixing vulnerabilities that have been reported to them. Only when the folks who reported it to them threaten to go public would they release patches. I've heard of this happening quite a lot in the earlier days of XP.