I think it's not a matter of not wanting to pay, but not wanting to have your departments "we had to pay someone to fix your security bugs" metric go up.
That's also likely why issues in the core product are taken more seriously.
My recent experience with GitHub regarding a security issue was not very positive either.[1] It turned out, unlike two vendors I notified that were affected, they just didn't care. And they didn't bother to even tell me that they didn't care.
It's a very edge-case issue in Enterprise SSO, so I wasn't really able to generate any blowback with disclosure either. But if you find an org with just the right setup it blows a huge hole into the SSO product, to the point of making it useless.
There also seems to be an asymmetry between the core product and everything else. GitHub Enterprise has issues that aren't even considered UX issues (i.e. notifications showing "3 of 0" notifications if no SAML session exists) that'd warrant bounties if they were in the core product.
The problem is with attribution of the problem to you directly.
People almost universally know that severe obesity is bad for them. You don't need to tell them.
There are many reasons people are obese. For me it was mostly a psychological issue. Doctors need better training in this regard, because telling someone to stop being lazy and eat well will almost never lead to them to improvement. Dieting, in the long term, it almost universally a failure. It just doesn't work. It doesn't address the right issues.
Yet, for doctors and those unaffected it seems like such a trivial thing that any deviation seems self-inflicted. They must be doing it willingly. They must be shamed. But it is never is that simple.
It is an attitude they constantly carry into conversations with patients. They need to take that attitude and throw it into the trash, because all it does is make the patient feel horrible about the lack of control they have over their condition that they supposedly should have, according to their doctor.
Failing to treat me is a professional failing with severe adverse effects for me. And it's entirely based on the judgemental assholeness of such doctors. If you can't stop blaming people for their conditions, find another job. I'm not my GPs therapist.
Hah, yeah. I had a big AFH tumor on my hand. "Probably ganglion". Thankfully these things rarely turn into full blown cancer and I got someone to take it serious (but only after it started necrotizing) before it did.
Cursing at me and telling me I will literally die in 10 years (I survived the guy by at least 10 years by now) and assuming the shock from that will get lazy me off the couch or something just put me into an extremely anxious state loop that didn't help me whatsoever. I didn't need to be told to eat less, I needed any coping mechanism that wasn't overeating. And I needed coping mechanisms a lot back then, the anxiety just contributed to that. I went through life for almost a decade just accepting my imminent death because I couldn't fix it.
They call it "trans broken arm syndrome" because this shit includes things that are obviously NOT hormone/obesity related. Things anyone else would get an immediate MRI for.
Exactly the kind of thoughtless answer that presumes I'm just angry about being told the hard truth or something I needed.
Being obese does NOT IN FACT lower your risk of every disease (except apparently heart failure?) that is not caused by obesity. Obese people need doctors for non-obesity related issues too.
I'm sure the amount of stress I've been exposed to from being yelled at by my physician "that i need to change or die young" at my diagnosis is pretty on par with this decreased life expectancy.
Not to mention I now have a general dislike for doctors and avoid them as much as possible, because inevitably everything I'd complain about would be blamed on excess weight or trans broken arm.
Love to see how empathetic doctors affect life expectancy. I'd assume quite a lot.
PhotoDNA, but it requires a suite of lawyers since the material it uses to fingerprint is high res enough to make it identifiable again. Or create false positives.
That's also likely why issues in the core product are taken more seriously.