[jeffmcjunkin]

Yup, silently patching (like JetBrains did) has a lot of downsides. Let alone the deception from JetBrains to the Rapid7 team.

(Disclosure: I know some of the folk on the Rapid7 side, so I'm perhaps biased towards their interpretation of events)

[xmodem]

What deception are you referring to? I don't see anything in the linked article that I would consider to be an accusation of deception.

[jeffmcjunkin]

Sorry, it was alluded to elsewhere: https://infosec.exchange/@iagox86/112045097519922098

There's more to the story that Rapid7 didn't want to air publicly, and none of it is good for JetBrains.