“The company addressed the bug without acknowledging or crediting software developer Denis Tokarev for the discovery even though he reported the flaw seven months before iOS 15.0.2 was released.”
Seven months to fix it, then no credit, then a request to keep the emails confidential. Apple blamed a “processing issue” for leaving his name off four advisories in a row. The company that sells privacy wants privacy from the people who find its bugs. Every researcher reading this just learned to sell the next one elsewhere.