I think an explanation would not be in order to go public, if it's an exploitable bug we don't want to parade around demanding answers, as Cirrus said DPR is looking into it and I imagine they'll message you in due course shortly. The less information we give out to public/LE, the better!