>>So you admit that vendors lying, denying or sandbagging on bugs and security holes is a wrong.
>
>I never said otheriwse.
>
>>Now, the other half is that you, your customers, me and other consumers have the RIGHT to be fully informed about potential bugs and security holes in software we purchase as quickly as they are learned about, not at the convenience of the vendor.
>
>Why?

Suppose a company religiously subscribes to MS's security bulletins. Suppose that company suffers a loss due to a security hole. Suppose MS knew about that hole prior to the company's loss, but didn't disclose it.

Suppose the loss was substantial and the company has the financing and fortitude to sue MS.

There may be no precedent set so far, but it'll take just one suit like this to markedly change the landscape...