I'm not sure why you're catching so much flak on this, Jeff. Your reporting was accurate, honest, and a service to the WordPress community. I read the original post title and the new one. Neither are incorrect or alarmist. It's not your responsibility to teach people how to read.

Also, whether this is currently an issue for one user or 350,000 doesn't negate the seriousness of the bug in the plugin. This is also the reason I re-tweeted Pippin's original tweet on this. It is a serious bug.