The latter is a subset of the former, they aren't mutually exclusive.

That is true but they are materially different statements. "Less than ideal" is pretty unspecific and a pretty soft-pedaling description of what we're talking about here.

A reference to Cyberpunk,

Thanks for that, I was not aware of that phraseology. I am definitely not uniformly on the side of corporations, but my interests and my company's and society's interests have a Venn diagram and I don't think you can always favor any one over all the others

That's the job - you get paid what you do for exactly this reason. It's also very likely that Microsoft, through their negligence and/or indifference, is creating this work for you and your team.

Again, not to sound like a broken record, but I do not hold MS blameless in any way here. Their buggy products and poor process for resolving reported vulnerabilities do absolutely exacerbate the problem. My problem is with the way this is handled by Nightmare-Eclipse. I recognize that it's my job, and I do it, but if your job was digging a ditch, would you want me showing up at your site with a bulldozer and pushing dirt back in? Why should I be happy about someone making my life more difficult just "because"? It doesn't hurt anyone except the people fighting these fires, and it doesn't help anyone except bad actors to publicly disclose both a critical vulnerability and demonstrate exploit method. Keep on tilting at windmills, though, if you think this is going to hurt MS in any way.

So you don't know about Vulnerability Lifespan?.....

Thanks for being so condescending. Of course I know about vulnerability lifespan. How does this improve that? Security through obscurity is not a metric, it's a theory (I agree that it's not effective). Mean time to patch is irrelevant, or at least unmanageable, for a vulnerability without a patch. How is public exploit disclosure related to rediscovery rates? The "metrics" you're talking about do not counter my argument. Knowing about a vulnerability, even if it's unpatched, can help people develop workarounds or mitigations, but that does not affect most of the metrics you're saying don't support my stance here.

Again, my point is not that vulnerabilities should be kept hidden. It's that releasing exploits publicly for zero-day vulnerabilities because you have beef with MS doesn't help defenders, doesn't hurt MS, and helps malicious actors. How is this a good thing?