Comment by alganet

Private disclosures for more sensitive vulnerabilities are a recommended practice. In your analogy, that's why I aluded to.

In such cases, you only share the sensitive vulnerability publicly once there is a fix. For this case, there seems to be no fix.

One could think of it as a way to promote more scrutinized hiring processes, but it actually encourages widespread paranoia and fear.

It seems your analogy is valid, but the conclusion is that it supports what I said.