>Be WAF vendor
>get advanced disclosure about php vuln
>leak enough info to the public so people can exploit it before patch is out
>inform customers they are safe when using your product