Of course it is the Vendor&#x27;s responsibility. But if the NSA, CIA, FBI, Homeland Security, Secret Service or any other government group gets in the way how much of the blame goes where when the shit hits the fan?<p>Most vendors will patch if they know about issues. Who is at fault when a hack happens and the the US government could have prevented it by divulging.