Question: why would someone believe that responsibly disclosing vulnerabilities that only affect local devices and mostly enable the owner of a device to gain root access to it is the best thing to do, instead of just publishing them outright? I understand responsible disclosure for server vulns that could cause harm to third party's plattforms or devices, but it seems unnecessary for this case.