Phantasm on Nostr: My stance is, issue is reported to <insert secteam of project>, few developers know ...

My stance is, issue is reported to <insert secteam of project>, few developers know about it and work on a patch exclusively outside of other work on the project, patch is circulated around private distro lists to prepare packages on embargo release. Embargo max 7 days after patch is done, ideally 1-2 days.