Feels like they were too nice. After 90 days of no response, why not just go full disclosure on them?

The CEO seems more interested in insulting people than securing his company’s product.