Brecht is one of our core developers, but he clearly expresses a personal statement here.

I have been in mail contact with Cisco about it, and in the last mail an engineer offered to help us with it. We take vulnerabilities serious, but when there are no simple answers or actions we just have to give it time to solve well.

Ton Roosendaal
Blender Foundation