That's great. They should not because if they do it, there is really no way to keep something as valuable as that vulnerability a secret. It would make the phone hackable.