He credited the Google researcher with "a good find" but said revealing it to the public before Microsoft had a chance to fixit puts the public at risk.
But I believe it is wishful thinking to assume any company that has standardized on Outlook will demand that Microsoftfix Outlook or threaten to switch to another client.