Yes. Vendors are <i>usually</i> hostile to researchers, and vendors generally <i>do</i> feel entitled to researcher work-product. Their feeling is, it&#x27;s their code, so they&#x27;re entitled to know about problems with it.