As a an owner and user of the Edge, I would be upset if someone disclosed vulnerabilities in a public review or article before identifying them to the developers. If you're aware of vulnerabilities, what's the point of not sharing them with the developers?